{"action":"created","issue":{"url":"https://api.github.com/repos/elabs/refile/issues/129","labels_url":"https://api.github.com/repos/elabs/refile/issues/129/labels{/name}","comments_url":"https://api.github.com/repos/elabs/refile/issues/129/comments","events_url":"https://api.github.com/repos/elabs/refile/issues/129/events","html_url":"https://github.com/elabs/refile/pull/129","id":55487160,"number":129,"title":"Signed attachment urls","user":{"login":"rossta","id":11673,"avatar_url":"https://avatars.githubusercontent.com/u/11673?v=3","gravatar_id":"","url":"https://api.github.com/users/rossta","html_url":"https://github.com/rossta","followers_url":"https://api.github.com/users/rossta/followers","following_url":"https://api.github.com/users/rossta/following{/other_user}","gists_url":"https://api.github.com/users/rossta/gists{/gist_id}","starred_url":"https://api.github.com/users/rossta/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rossta/subscriptions","organizations_url":"https://api.github.com/users/rossta/orgs","repos_url":"https://api.github.com/users/rossta/repos","events_url":"https://api.github.com/users/rossta/events{/privacy}","received_events_url":"https://api.github.com/users/rossta/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2015-01-26T14:21:28Z","updated_at":"2015-01-29T08:02:47Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/elabs/refile/pulls/129","html_url":"https://github.com/elabs/refile/pull/129","diff_url":"https://github.com/elabs/refile/pull/129.diff","patch_url":"https://github.com/elabs/refile/pull/129.patch"},"body":"Adds ability to generate signed attachment urls by configuring `Refile.secret_token' as security against DoS and generation of unauthorized processing."},"comment":{"url":"https://api.github.com/repos/elabs/refile/issues/comments/71984616","html_url":"https://github.com/elabs/refile/pull/129#issuecomment-71984616","issue_url":"https://api.github.com/repos/elabs/refile/issues/129","id":71984616,"user":{"login":"joeljunstrom","id":163774,"avatar_url":"https://avatars.githubusercontent.com/u/163774?v=3","gravatar_id":"","url":"https://api.github.com/users/joeljunstrom","html_url":"https://github.com/joeljunstrom","followers_url":"https://api.github.com/users/joeljunstrom/followers","following_url":"https://api.github.com/users/joeljunstrom/following{/other_user}","gists_url":"https://api.github.com/users/joeljunstrom/gists{/gist_id}","starred_url":"https://api.github.com/users/joeljunstrom/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/joeljunstrom/subscriptions","organizations_url":"https://api.github.com/users/joeljunstrom/orgs","repos_url":"https://api.github.com/users/joeljunstrom/repos","events_url":"https://api.github.com/users/joeljunstrom/events{/privacy}","received_events_url":"https://api.github.com/users/joeljunstrom/received_events","type":"User","site_admin":false},"created_at":"2015-01-29T08:02:47Z","updated_at":"2015-01-29T08:02:47Z","body":"Until we have a clear use case of the need to generate url's client side maybe this should be enforced ( \r\nie. throw an error if a secret isn't set). Even with the warning non secure defaults should probably be avoided.\r\n\r\nI realize this breaks existing installations but I think the feature warrants it.\r\n"}}