Under some situations, we would inadvertently return a public (unauthenticated) result to an authenticated API request. This commit adds the `Api-Key` header to our anonymous cache bypass logic. |
||
|---|---|---|
| .. | ||
| anonymous_cache_spec.rb | ||
| discourse_public_exceptions_spec.rb | ||
| enforce_hostname_spec.rb | ||
| request_tracker_spec.rb | ||