mirror of
https://github.com/TryGhost/Ghost.git
synced 2025-02-10 23:36:14 -05:00
refs https://github.com/TryGhost/Team/issues/1461 - A suspended user was able to make it through the Express middlewares to the `updateUserLastSeen` middleware, until it was halted when checking the user permissions in the API pipeline. This was only the case for session logins, not for API keys. - For API keys, the user status is checked: |
||
---|---|---|
.. | ||
client@5751899e5b | ||
frontend | ||
server | ||
shared | ||
app.js | ||
boot.js | ||
bridge.js |