mirror of
https://github.com/TryGhost/Ghost.git
synced 2025-01-06 22:40:14 -05:00
d246a4761e
no-issue
This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing
a public key, and one on the canary api /identities, which allows the
Owner user to fetch a JWT.
This token can then be used by external services to verify the domain
* Added ghost_{public,private}_key settings
This key can be used for generating tokens for communicating with
external services on behalf of Ghost
* Added .well-known directory to /ghost/.well-known
We add a jwks.json file to the .well-known directory which exposes a
public JWK which can be used to verify the signatures of JWT's created
by Ghost
This is added to the /ghost/ path so that it can live on the admin
domain, rather than the frontend. This is because most of its
uses/functions will be in relation to the admin domain.
* Improved settings model tests
This removes hardcoded positions in favour of testing that a particular
event wasn't emitted which is less brittle and more precise about what's
being tested
* Fixed parent app unit tests for well-known
This updates the parent app unit tests to check that the well-known
route is mounted. We all change proxyquire to use `noCallThru` which
ensures that the ubderlying modules are not required. This stops the
initialisation logic in ./well-known erroring in tests
https://github.com/thlorenz/proxyquire/issues/215
* Moved jwt signature to a separate 'token' propery
This structure corresponds to other resources and allows to exptend with
additional properties in future if needed
|
||
|---|---|---|
| .. | ||
| utils | ||
| actions.js | ||
| authentication.js | ||
| authors-public.js | ||
| config.js | ||
| db.js | ||
| email-preview.js | ||
| email.js | ||
| identities.js | ||
| images.js | ||
| index.js | ||
| integrations.js | ||
| invites.js | ||
| labels.js | ||
| mail.js | ||
| members.js | ||
| memberSigninUrls.js | ||
| notifications.js | ||
| oembed.js | ||
| pages-public.js | ||
| pages.js | ||
| posts-public.js | ||
| posts.js | ||
| preview.js | ||
| redirects.js | ||
| roles.js | ||
| schedules.js | ||
| session.js | ||
| settings-public.js | ||
| settings.js | ||
| site.js | ||
| slack.js | ||
| slugs.js | ||
| tags-public.js | ||
| tags.js | ||
| themes.js | ||
| users.js | ||
| webhooks.js | ||