{"action":"created","issue":{"url":"https://api.github.com/repos/webcompat/webcompat.com/issues/845","labels_url":"https://api.github.com/repos/webcompat/webcompat.com/issues/845/labels{/name}","comments_url":"https://api.github.com/repos/webcompat/webcompat.com/issues/845/comments","events_url":"https://api.github.com/repos/webcompat/webcompat.com/issues/845/events","html_url":"https://github.com/webcompat/webcompat.com/issues/845","id":121338026,"number":845,"title":"Un-authorized user comments appear as comments from webcompat-bot","user":{"login":"hallvors","id":120136,"avatar_url":"https://avatars.githubusercontent.com/u/120136?v=3","gravatar_id":"","url":"https://api.github.com/users/hallvors","html_url":"https://github.com/hallvors","followers_url":"https://api.github.com/users/hallvors/followers","following_url":"https://api.github.com/users/hallvors/following{/other_user}","gists_url":"https://api.github.com/users/hallvors/gists{/gist_id}","starred_url":"https://api.github.com/users/hallvors/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hallvors/subscriptions","organizations_url":"https://api.github.com/users/hallvors/orgs","repos_url":"https://api.github.com/users/hallvors/repos","events_url":"https://api.github.com/users/hallvors/events{/privacy}","received_events_url":"https://api.github.com/users/hallvors/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-12-09T21:02:44Z","updated_at":"2015-12-10T16:09:26Z","closed_at":null,"body":"Client-side we don't show a TEXTAREA for inputting comments if the user is not logged in via GitHub. However, under the hood non-authed users can still submit comments. They will appear as being posted by webcompat-bot. Usually, this will likely happen by accident - maybe if the user loaded an issue, logged out from GitHub in a different tab, then tried to comment .. or something like that??\r\n\r\nComment POSTing presumably starts the journey through the backend here:\r\nhttps://github.com/webcompat/webcompat.com/blob/master/webcompat/api/endpoints.py#L214\r\nthat method just forwards all bits to api_request\r\nhttps://github.com/webcompat/webcompat.com/blob/master/webcompat/helpers.py#L401\r\nwhich, if the user is not logged in, calls proxy_request\r\nhttps://github.com/webcompat/webcompat.com/blob/master/webcompat/helpers.py#L379\r\nVoila, anonymous posting - right?"},"comment":{"url":"https://api.github.com/repos/webcompat/webcompat.com/issues/comments/163672349","html_url":"https://github.com/webcompat/webcompat.com/issues/845#issuecomment-163672349","issue_url":"https://api.github.com/repos/webcompat/webcompat.com/issues/845","id":163672349,"user":{"login":"miketaylr","id":67283,"avatar_url":"https://avatars.githubusercontent.com/u/67283?v=3","gravatar_id":"","url":"https://api.github.com/users/miketaylr","html_url":"https://github.com/miketaylr","followers_url":"https://api.github.com/users/miketaylr/followers","following_url":"https://api.github.com/users/miketaylr/following{/other_user}","gists_url":"https://api.github.com/users/miketaylr/gists{/gist_id}","starred_url":"https://api.github.com/users/miketaylr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/miketaylr/subscriptions","organizations_url":"https://api.github.com/users/miketaylr/orgs","repos_url":"https://api.github.com/users/miketaylr/repos","events_url":"https://api.github.com/users/miketaylr/events{/privacy}","received_events_url":"https://api.github.com/users/miketaylr/received_events","type":"User","site_admin":false},"created_at":"2015-12-10T16:09:26Z","updated_at":"2015-12-10T16:09:26Z","body":"Yeah, this is bogus. Thanks for filing @hallvors."}}