m038andClaude Opus 4.8
2840018372
- gitignore config/security-private.php (CSRF/nonce + rate-limit signing salt); it is a per-install secret Grav auto-generates and its own header says not to commit. Each environment now keeps its own uncommitted salt. - drop the runtime-generated popularity.salt from api.yaml; Grav re-derives it per install. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Np4cMQLF77i664CAQXySzU
60 lines
983 B
YAML
60 lines
983 B
YAML
enabled: true
|
|
route: /api
|
|
version_prefix: v1
|
|
auth:
|
|
api_keys_enabled: true
|
|
jwt_enabled: true
|
|
jwt_algorithm: HS256
|
|
jwt_expiry: 3600
|
|
jwt_refresh_expiry: 604800
|
|
session_enabled: true
|
|
cors:
|
|
enabled: true
|
|
origins: { }
|
|
methods:
|
|
- GET
|
|
- POST
|
|
- PATCH
|
|
- DELETE
|
|
- OPTIONS
|
|
headers:
|
|
- Content-Type
|
|
- Authorization
|
|
- X-API-Key
|
|
- X-API-Token
|
|
- X-Grav-Environment
|
|
- If-Match
|
|
- If-None-Match
|
|
expose_headers:
|
|
- ETag
|
|
- X-Invalidates
|
|
- X-RateLimit-Limit
|
|
- X-RateLimit-Remaining
|
|
- X-RateLimit-Reset
|
|
max_age: 86400
|
|
credentials: false
|
|
rate_limit:
|
|
enabled: true
|
|
requests: 120
|
|
window: 60
|
|
storage: file
|
|
flex_backend:
|
|
pages: true
|
|
accounts: true
|
|
pagination:
|
|
default_per_page: 20
|
|
max_per_page: 1000
|
|
invitations:
|
|
expiration: 604800
|
|
popularity:
|
|
enabled: true
|
|
exclude_admin: true
|
|
exclude_ips: { }
|
|
history:
|
|
daily: 30
|
|
monthly: 12
|
|
visitors: 20
|
|
ignore:
|
|
- '/test*'
|
|
- /modular
|