02a0fd5a32
closes https://github.com/TryGhost/Toolbox/issues/386 - When the API request was made using staff token the source attribution was "user" instead of "api". Misattribution caused ripple effects in limit service. - The fix also adds a new combination of data available on the `req` object - both `user` and `api_key` can be present when the request is done using a staff (user) token. Having both pieces of data on the request object gives more context for business logic, did not find a good reason to keep it "pure" with either `api_key` or `user` property. |
||
|---|---|---|
| .. | ||
| lib | ||
| test | ||
| .eslintrc.js | ||
| .gitignore | ||
| index.js | ||
| package.json | ||