02a0fd5a32
closes https://github.com/TryGhost/Toolbox/issues/386 - When the API request was made using staff token the source attribution was "user" instead of "api". Misattribution caused ripple effects in limit service. - The fix also adds a new combination of data available on the `req` object - both `user` and `api_key` can be present when the request is done using a staff (user) token. Having both pieces of data on the request object gives more context for business logic, did not find a good reason to keep it "pure" with either `api_key` or `user` property. |
||
|---|---|---|
| .. | ||
| controllers | ||
| repositories | ||
| services | ||
| MembersAPI.js | ||