Change unauthenticated responses to be cached in REST API (#24348)

2023-04-25 15:41:34 +02:00
parent c35e3cb6ac
commit 6084461cd0
29 changed files with 67 additions and 9 deletions
--- a/app/controllers/api/base_controller.rb
+++ b/app/controllers/api/base_controller.rb
@@ -6,6 +6,7 @@ class Api::BaseController < ApplicationController

  include RateLimitHeaders
  include AccessTokenTrackingConcern
+  include ApiCachingConcern

  skip_before_action :store_current_location
  skip_before_action :require_functional!, unless: :whitelist_mode?
@@ -13,6 +14,8 @@ class Api::BaseController < ApplicationController
  before_action :require_authenticated_user!, if: :disallow_unauthenticated_api_access?
  before_action :require_not_suspended!

+  vary_by 'Authorization'
+
  protect_from_forgery with: :null_session

  content_security_policy do |p|