# HG changeset patch # User Marcin Kuzminski # Date 2017-08-04 10:41:17 # Node ID 7eb08ad39a53ccc51d0026d052c4ed1a82060faa # Parent f0eeceeded5e950b725f96f912b15fc8b35b20ee configs: added info about @TOKEN syntaxt for whitelist views. diff --git a/configs/development.ini b/configs/development.ini --- a/configs/development.ini +++ b/configs/development.ini @@ -205,6 +205,9 @@ gist_alias_url = ## used for access. ## Adding ?auth_token=TOKEN_HASH to the url authenticates this request as if it ## came from the the logged in user who own this authentication token. +## Additionally @TOKEN syntaxt can be used to bound the view to specific +## authentication token. Such view would be only accessible when used together +## with this authentication token ## ## list of all views can be found under `_admin/permissions/auth_token_access` ## The list should be "," separated and on a single line. @@ -213,6 +216,7 @@ gist_alias_url = # RepoCommitsView:repo_commit_download # RepoCommitsView:repo_commit_patch # RepoCommitsView:repo_commit_raw +# RepoCommitsView:repo_commit_raw@TOKEN # RepoFilesView:repo_files_diff # RepoFilesView:repo_archivefile # RepoFilesView:repo_file_raw diff --git a/configs/production.ini b/configs/production.ini --- a/configs/production.ini +++ b/configs/production.ini @@ -179,6 +179,9 @@ gist_alias_url = ## used for access. ## Adding ?auth_token=TOKEN_HASH to the url authenticates this request as if it ## came from the the logged in user who own this authentication token. +## Additionally @TOKEN syntaxt can be used to bound the view to specific +## authentication token. Such view would be only accessible when used together +## with this authentication token ## ## list of all views can be found under `_admin/permissions/auth_token_access` ## The list should be "," separated and on a single line. @@ -187,6 +190,7 @@ gist_alias_url = # RepoCommitsView:repo_commit_download # RepoCommitsView:repo_commit_patch # RepoCommitsView:repo_commit_raw +# RepoCommitsView:repo_commit_raw@TOKEN # RepoFilesView:repo_files_diff # RepoFilesView:repo_archivefile # RepoFilesView:repo_file_raw