mirror of
https://github.com/TryGhost/Ghost.git
synced 2025-01-20 22:42:53 -05:00
a55fb0bafe
closes #7628 With this PR we expose a public configuration endpoint. When /ghost is requested, we don't load and render the configurations into the template anymore. Instead, Ghost-Admin can request the public configuration endpoint. * 🎨 make configuration endpoint public * 🔥 remove loading configurations in admin app - do not render them into the default html page * ✨ load client credentials in configuration endpoint - this is not a security issue, because we have exposed this information anyway before (by rendering them into the requested html page) * 🎨 extend existing configuration integration test * ✨ tests: add ghost-auth to data generator * ✨ add functional test * 🔥 remove type/value pattern * 🎨 do not return stringified JSON objects |
||
|---|---|---|
| .. | ||
| advanced_browse_spec.js | ||
| api_authentication_spec.js | ||
| api_configuration_spec.js | ||
| api_db_spec.js | ||
| api_invites_spec.js | ||
| api_mail_spec.js | ||
| api_notifications_spec.js | ||
| api_posts_spec.js | ||
| api_roles_spec.js | ||
| api_schedules_spec.js | ||
| api_settings_spec.js | ||
| api_slugs_spec.js | ||
| api_subscription_spec.js | ||
| api_tags_spec.js | ||
| api_users_spec.js | ||