decidim-api 0.31.4 → 0.31.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ae45fc3d685b2331b8240879f2c09bdb9101ed6714c61da6e063c309de0a8a0b
-  data.tar.gz: 203618d147f00913b3bda30a306fbd7ad2e14ad7f5d4f9d22c69be80fc22915c
+  metadata.gz: 9388f35d8078788db3b4ffb82ad57fd3613b8a211cccec2dc323ab9ad309a48a
+  data.tar.gz: cae123fcca10eeffeb112504eec0758c6985d6cbd8f5770013168866934d925c
 SHA512:
-  metadata.gz: 8bb0a4a183f4c931d5ac3132631baa460f0a39546cd16f84c18e9fff533a4371d2013ca167e0a5033bde5cd7db0e2416097adc3759c7516b3cec67f1da188d31
-  data.tar.gz: aaf3904b9008b1852daa098583b3911e9d7cd9a5d0fcef178fb9102f449257647ab402d18bb7b91df02b9f682e65472128ec2cd2cf6b43c39ad254e385d088ff
+  metadata.gz: 1edf7ced4e9154b0640796b4cf36254c09cbd58a9682ce770a71f12fc6d5b974a033f8778a6ba38b351221456a325754e2cd7fab29dfd979b30cd4952a1548f7
+  data.tar.gz: 2b779e3d479e40552f002bf88b6824bc8dcf860b588d5d1d78d17331c6aa9c031bbbcb9325d8a85c78aed4eca9cf47c6d829552de80f011ea5b49c72bbe327cf

data/app/controllers/decidim/api/queries_controller.rb

@@ -36,7 +36,7 @@ module Decidim
       end
 
       def api_user
-        @api_user = current_api_user || current_user
+        @api_user ||= organization_user(current_api_user || current_user)
       end
 
       # Determines the scopes for the user for API requests.
@@ -84,6 +84,13 @@ module Decidim
           raise ArgumentError, "Unexpected parameter: #{variables_param}"
         end
       end
+
+      def organization_user(user)
+        return if user.blank? || current_organization.blank?
+        return unless user.decidim_organization_id == current_organization.id
+
+        user
+      end
     end
   end
 end

data/config/locales/sk.yml

@@ -1 +1,8 @@
+---
 sk:
+  decidim:
+    api:
+      errors:
+        introspection_disabled: Introspekcia je pre túto požiadavku zakázaná
+        recursion_limit_exceeded_error: V dopyte bolo zistených príliš veľa rekurzií
+        too_many_aliases_error: Použilo sa príliš veľa aliasov. Použili ste %{size} aliasov, ale povolených je %{limit}.

data/lib/decidim/api/version.rb

@@ -4,7 +4,7 @@ module Decidim
   # This holds the decidim-api version.
   module Api
     def self.version
-      "0.31.4"
+      "0.31.5"
     end
   end
 end

data/lib/devise/models/api_authenticatable.rb

@@ -22,7 +22,13 @@ module Devise
         end
 
         def find_for_api_authentication(conditions)
-          find_for_authentication(conditions)
+          organization = conditions.dig(:env, "decidim.current_organization")
+          return unless organization
+
+          find_for_authentication(
+            api_key: conditions[:api_key],
+            decidim_organization_id: organization.id
+          )
         end
       end
     end

data/lib/devise/strategies/api_authenticatable.rb

@@ -9,7 +9,7 @@ module Devise
         key = authentication_hash[:key]
         secret = authentication_hash[:secret]
 
-        resource = mapping.to.find_for_api_authentication(api_key: key)
+        resource = mapping.to.find_for_api_authentication(api_key: key, env:)
         validation_status = validate(resource) { resource.valid_api_secret?(secret) }
 
         success!(resource) if validation_status

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: decidim-api
 version: !ruby/object:Gem::Version
-  version: 0.31.4
+  version: 0.31.5
 platform: ruby
 authors:
 - Josep Jaume Rey Peroy
@@ -10,7 +10,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-04-24 00:00:00.000000000 Z
+date: 2026-05-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: decidim-core
@@ -18,14 +18,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.31.4
+        version: 0.31.5
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.31.4
+        version: 0.31.5
 - !ruby/object:Gem::Dependency
   name: devise-jwt
   requirement: !ruby/object:Gem::Requirement
@@ -94,56 +94,56 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.31.4
+        version: 0.31.5
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.31.4
+        version: 0.31.5
 - !ruby/object:Gem::Dependency
   name: decidim-comments
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.31.4
+        version: 0.31.5
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.31.4
+        version: 0.31.5
 - !ruby/object:Gem::Dependency
   name: decidim-dev
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.31.4
+        version: 0.31.5
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.31.4
+        version: 0.31.5
 - !ruby/object:Gem::Dependency
   name: decidim-participatory_processes
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.31.4
+        version: 0.31.5
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.31.4
+        version: 0.31.5
 description: API engine for decidim
 email:
 - josepjaume@gmail.com