طلب التحقق من صلاحيات المسؤول لمفتاح API الخاص بـ Discourse

[NateDhaliwal]

@Apoorva_Johari

أكد ما إذا كان مفتاح واجهة برمجة التطبيقات (API) الحالي يتمتع بوصول على مستوى المسؤول.

على حد علمي، تتمتع مفاتيح واجهة برمجة التطبيقات (API) بوصول المسؤول، إذا قمت بتحديد نطاقها بشكل صحيح. راجع Admin - docs.discourse.org.

Create and configure an API key

API keys are generated from the Admin / API page. Go to Admin-Advanced-API Keys: [Left Menu > Admin > API keys] [Admin > API keys] After clicking the “New API Key” button, you will be taken to a page to configure the key: [New API key] Every API key needs a description, a user level, and a scope. Description The description can be anything that you choose. User Level The User Level drop down allows you to select either “All Users” or “Single User.” If “All Users” is selected, the key c…

Use scoped API Keys

API Keys let us integrate Discourse with other systems or automate different actions. However, great power comes with great responsibility. If a malicious actor has access to an API Key, they could have access to sensitive data or make changes to your site. To mitigate this and add an extra layer of security, you can now limit what an API key can do using scopes. Scopes and allowed parameters When creating a new API Key, you can select which scopes you want. If you hover over the …