Donal McBreen 13e2c74929 Restrict bearer token authentication to JSON requests ...

Bearer tokens are for API/SDK/CLI access — they should only
authenticate JSON requests.

2026-04-01 08:55:04 +01:00

..

account

Add self-service account deletion (#2246)

2026-01-12 14:21:05 +01:00

accounts

Add JSON response format to entropy endpoints (#2673)

2026-03-10 11:31:00 -04:00

active_storage

Require authorization for direct uploads

2025-12-23 11:08:51 +01:00

admin

Add billing system with Stripe

2025-12-16 16:44:20 +01:00

api

Add JSON response format to entropy endpoints (#2673)

2026-03-10 11:31:00 -04:00

boards

Add JSON response format to entropy endpoints (#2673)

2026-03-10 11:31:00 -04:00

cards

Wrap comment params for flat JSON payloads (#2679)

2026-03-09 17:02:08 -07:00

columns

Add JSON response format for full SDK/CLI coverage (#2675)

2026-03-09 11:39:49 -07:00

concerns

Update additional tests to ensure that the body element contains the correct bridge attributes

2026-03-17 11:04:39 -04:00

events/day_timeline

Update test

2025-11-24 12:04:33 +01:00

my

Add a purpose to challanges

2026-03-25 17:57:37 +01:00

notifications

Add JSON response format for full SDK/CLI coverage (#2675)

2026-03-09 11:39:49 -07:00

prompts

Omit inactive users from board mention picker

2026-02-03 18:42:15 -05:00

public

Filter draft cards from public closed column (#2667)

2026-03-05 20:31:41 -05:00

searches

Format

2025-06-24 13:26:37 +02:00

sessions

Polish up Passkey interface

2026-03-18 11:51:10 +01:00

signup

Small native API changes: include identity ID, return empty signup completion body

2026-02-25 14:34:09 +01:00

users

Add JSON response format for full SDK/CLI coverage (#2675)

2026-03-09 11:39:49 -07:00

webhooks

Add JSON response format to webhooks (#2671)

2026-03-09 17:33:30 -04:00

allow_browser_test.rb

Update useragent to recognize twitterbot/facebot

2025-11-25 18:05:21 -05:00

api_test.rb

Add JSON format support to session destroy for native API clients

2026-01-27 19:59:30 +01:00

boards_controller_test.rb

Add JSON response format to entropy endpoints (#2673)

2026-03-10 11:31:00 -04:00

cards_controller_test.rb

Fix card view "M" hotkey using stale user from fragment cache

2026-03-17 14:43:05 -04:00

client_configurations_controller_test.rb

Implement ClientConfigurationsController for mobile client path config.

2026-02-24 11:25:07 +01:00

controller_authentication_test.rb

Remove the internal API

2025-10-31 16:26:08 +01:00

events_controller_test.rb

Baseline replacing collection with board across code

2025-11-05 13:31:54 +01:00

filters_controller_test.rb

Make IDs more time-sortable in tests

2025-11-17 09:12:40 -05:00

join_codes_controller_test.rb

feat: add rate limit to join codes controller

2025-12-12 17:21:57 +01:00

landings_controller_test.rb

Redirect to root to avoid changing the path by default

2025-11-05 19:00:50 +01:00

notifications_controller_test.rb

Add postponed and closed flags to Pinned and Notification cards

2026-02-13 00:45:47 +01:00

qr_codes_controller_test.rb

Add QrCodesController test

2025-12-11 13:51:18 -05:00

searches_controller_test.rb

Add JSON response format for full SDK/CLI coverage (#2675)

2026-03-09 11:39:49 -07:00

sessions_controller_test.rb

Add JSON format support to session destroy for native API clients

2026-01-27 19:59:30 +01:00

signups_controller_test.rb

Use initializer to configure tenant mode

2025-12-11 11:20:43 +00:00

tags_controller_test.rb

Add pagination to most places and fix cards pagination

2025-12-10 09:23:52 +01:00

users_controller_test.rb

Restrict bearer token authentication to JSON requests

2026-04-01 08:55:04 +01:00

webhooks_controller_test.rb

Add JSON response format to webhooks (#2671)

2026-03-09 17:33:30 -04:00