gristlabs_grist-core/app/server
Paul Fitzpatrick 8f023a6446 (core) implement authorization via query parameter
Summary:
This adds any parameters in a document url whose key ends in '_'
into a `user.Link` object available in access control formulas
and in setting up characteristic tables.

This allows, for example, sending links to a document that contain
a hard-to-guess token, and having that link grant access to a
controlled part of the document (invoices for a specific customer
for example).

A `user.Origin` field is also added, set during rest api calls,
but is only tested manually at this point.  It could be elaborated
for embedding use-cases.

Test Plan: added test

Reviewers: dsagal

Reviewed By: dsagal

Differential Revision: https://phab.getgrist.com/D2680
2020-12-09 09:48:06 -05:00
..
lib (core) implement authorization via query parameter 2020-12-09 09:48:06 -05:00
declarations.d.ts (core) remove metrics 2020-09-29 18:57:56 -04:00
devServerMain.ts (core) remove metrics 2020-09-29 18:57:56 -04:00
mergedServerMain.ts (core) remove metrics 2020-09-29 18:57:56 -04:00
serverMethods.js (core) make ValueFormatter.format honor its return type 2020-11-12 15:19:38 -05:00
tsconfig.json (core) move home server into core 2020-07-21 20:39:10 -04:00