support-project / knowledge

Free Knowledge Management System
Apache License 2.0
719 stars 185 forks source link

Is there the explanation about the usage of "Access token" in manual? #1091

Open yoshihingis opened 4 years ago

yoshihingis commented 4 years ago

Is there the explanation about the usage of "Access token" in manual?

I want to know the usage of access token of the knowledge. But I could not find the explanation about usage of access token in manual.

I'd really appreciate it if you teach me the usage about access token of the knowledge.

Regards,

nichesuch commented 4 years ago

私も気になって調べました。

https://github.com/support-project/knowledge/issues/760#issuecomment-312867952

https://github.com/support-project/knowledge/commit/89a9955f310d2af5ae1e0a55c691befc6fdd827c

      // 認証
        // Httpヘッダー「PRIVATE-TOKEN」か、リクエストパラメータ「private_token」の値で認証する(GitLab準拠)
        String token = req.getHeader("PRIVATE-TOKEN");
        if (StringUtils.isEmpty(token)) {
            token = req.getParameter("private_token");
        }
        if (StringUtils.isEmpty(token)) {
            // Tokenが指定されていない
            res.sendError(HttpStatus.SC_403_FORBIDDEN);
            return;
        }