mirror of
https://github.com/TryGhost/Ghost.git
synced 2025-01-20 22:42:53 -05:00
a55fb0bafe
closes #7628 With this PR we expose a public configuration endpoint. When /ghost is requested, we don't load and render the configurations into the template anymore. Instead, Ghost-Admin can request the public configuration endpoint. * 🎨 make configuration endpoint public * 🔥 remove loading configurations in admin app - do not render them into the default html page * ✨ load client credentials in configuration endpoint - this is not a security issue, because we have exposed this information anyway before (by rendering them into the requested html page) * 🎨 extend existing configuration integration test * ✨ tests: add ghost-auth to data generator * ✨ add functional test * 🔥 remove type/value pattern * 🎨 do not return stringified JSON objects |
||
|---|---|---|
| .. | ||
| app.js | ||
| authentication.js | ||
| clients.js | ||
| configuration.js | ||
| db.js | ||
| index.js | ||
| invites.js | ||
| mail.js | ||
| notifications.js | ||
| posts.js | ||
| roles.js | ||
| schedules.js | ||
| settings.js | ||
| slack.js | ||
| slugs.js | ||
| subscribers.js | ||
| tags.js | ||
| themes.js | ||
| upload.js | ||
| users.js | ||
| utils.js | ||