{"action":"created","issue":{"url":"https://api.github.com/repos/adsabs/adsws/issues/37","labels_url":"https://api.github.com/repos/adsabs/adsws/issues/37/labels{/name}","comments_url":"https://api.github.com/repos/adsabs/adsws/issues/37/comments","events_url":"https://api.github.com/repos/adsabs/adsws/issues/37/events","html_url":"https://github.com/adsabs/adsws/issues/37","id":56085242,"number":37,"title":"third-party services that are API clients should forward user's token","user":{"login":"vsudilov","id":3504740,"avatar_url":"https://avatars.githubusercontent.com/u/3504740?v=3","gravatar_id":"","url":"https://api.github.com/users/vsudilov","html_url":"https://github.com/vsudilov","followers_url":"https://api.github.com/users/vsudilov/followers","following_url":"https://api.github.com/users/vsudilov/following{/other_user}","gists_url":"https://api.github.com/users/vsudilov/gists{/gist_id}","starred_url":"https://api.github.com/users/vsudilov/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vsudilov/subscriptions","organizations_url":"https://api.github.com/users/vsudilov/orgs","repos_url":"https://api.github.com/users/vsudilov/repos","events_url":"https://api.github.com/users/vsudilov/events{/privacy}","received_events_url":"https://api.github.com/users/vsudilov/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/adsabs/adsws/labels/core","name":"core","color":"009800"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-01-30T21:11:30Z","updated_at":"2015-02-23T18:44:24Z","closed_at":null,"body":"References https://github.com/aholachek/vis-services/issues/5"},"comment":{"url":"https://api.github.com/repos/adsabs/adsws/issues/comments/75604491","html_url":"https://github.com/adsabs/adsws/issues/37#issuecomment-75604491","issue_url":"https://api.github.com/repos/adsabs/adsws/issues/37","id":75604491,"user":{"login":"vsudilov","id":3504740,"avatar_url":"https://avatars.githubusercontent.com/u/3504740?v=3","gravatar_id":"","url":"https://api.github.com/users/vsudilov","html_url":"https://github.com/vsudilov","followers_url":"https://api.github.com/users/vsudilov/followers","following_url":"https://api.github.com/users/vsudilov/following{/other_user}","gists_url":"https://api.github.com/users/vsudilov/gists{/gist_id}","starred_url":"https://api.github.com/users/vsudilov/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vsudilov/subscriptions","organizations_url":"https://api.github.com/users/vsudilov/orgs","repos_url":"https://api.github.com/users/vsudilov/repos","events_url":"https://api.github.com/users/vsudilov/events{/privacy}","received_events_url":"https://api.github.com/users/vsudilov/received_events","type":"User","site_admin":false},"created_at":"2015-02-23T18:44:24Z","updated_at":"2015-02-23T18:44:24Z","body":"Implemented a hackish solution: if `X-Forwarded-Authorization` is present in `request.headers`, check if `request.oauth.client.client_id` is within a hardcoded list of known/approved clients. If it is, set the ratelimit scope function to a random salt. "}}