← All changes

SummerCMS 0.1.21

v0.1.211 min read

Highlights

Admins can create personal API tokens with scopes and use them to call admin and plugin APIs, alongside the cookie session.

Added

  • pact.HasTokenScopes lets plugins declare token scopes; requests carrying a g15_ token pass through a combined backend guard and are denied by default outside their scopes.
  • cabana.ResolveBackend resolves the backend user from either a session or a token.
  • An API tokens panel on My account: create a token (shown once), list tokens, show revoked ones and revoke with confirmation.
  • admin:token console commands.
  • Tokens record when they were last used.
  • Module READMEs describe each module's role in the framework.
Subscribe via RSS