RSS Observations

[sam (Sam Saffron)]

We discussed the enabling work with @Falco and @david

User API keys specification

How about creating a specific new scope, with a third parameter to indicate “get param allowed”. That way, people can’t misuse it for other things (e.g. bypassing CORS and requesting the discourse API from another site). (from here) SCOPES = { read: [:get], write: [:get, :post, :patch, :put, :delete], message_bus: [[:post, 'message_bus']], push: nil, one_time_password: nil, notifications: [[:post, 'message_bus'], [:get, 'notifications#index'], [:put, 'notifications#mark…

That is a blocker on us supporting notifications as rss feeds, once that is done adding this will be trivial.