{"action":"created","issue":{"url":"https://api.github.com/repos/rossjones/ckan-mini/issues/3","labels_url":"https://api.github.com/repos/rossjones/ckan-mini/issues/3/labels{/name}","comments_url":"https://api.github.com/repos/rossjones/ckan-mini/issues/3/comments","events_url":"https://api.github.com/repos/rossjones/ckan-mini/issues/3/events","html_url":"https://github.com/rossjones/ckan-mini/issues/3","id":109152803,"number":3,"title":"How *exactly* will people log on?","user":{"login":"rossjones","id":118063,"avatar_url":"https://avatars.githubusercontent.com/u/118063?v=3","gravatar_id":"","url":"https://api.github.com/users/rossjones","html_url":"https://github.com/rossjones","followers_url":"https://api.github.com/users/rossjones/followers","following_url":"https://api.github.com/users/rossjones/following{/other_user}","gists_url":"https://api.github.com/users/rossjones/gists{/gist_id}","starred_url":"https://api.github.com/users/rossjones/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rossjones/subscriptions","organizations_url":"https://api.github.com/users/rossjones/orgs","repos_url":"https://api.github.com/users/rossjones/repos","events_url":"https://api.github.com/users/rossjones/events{/privacy}","received_events_url":"https://api.github.com/users/rossjones/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/rossjones/ckan-mini/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-09-30T18:34:19Z","updated_at":"2015-10-04T14:55:22Z","closed_at":null,"body":"A SPA will need an API key for the user in order to call most actions methods.  How *exactly* will the user get this (aka what does the user_login action function look like)?  Does it just return the API key? I guess so."},"comment":{"url":"https://api.github.com/repos/rossjones/ckan-mini/issues/comments/145356000","html_url":"https://github.com/rossjones/ckan-mini/issues/3#issuecomment-145356000","issue_url":"https://api.github.com/repos/rossjones/ckan-mini/issues/3","id":145356000,"user":{"login":"rossjones","id":118063,"avatar_url":"https://avatars.githubusercontent.com/u/118063?v=3","gravatar_id":"","url":"https://api.github.com/users/rossjones","html_url":"https://github.com/rossjones","followers_url":"https://api.github.com/users/rossjones/followers","following_url":"https://api.github.com/users/rossjones/following{/other_user}","gists_url":"https://api.github.com/users/rossjones/gists{/gist_id}","starred_url":"https://api.github.com/users/rossjones/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rossjones/subscriptions","organizations_url":"https://api.github.com/users/rossjones/orgs","repos_url":"https://api.github.com/users/rossjones/repos","events_url":"https://api.github.com/users/rossjones/events{/privacy}","received_events_url":"https://api.github.com/users/rossjones/received_events","type":"User","site_admin":false},"created_at":"2015-10-04T14:55:22Z","updated_at":"2015-10-04T14:55:22Z","body":"Implemented a scarily insecure call in logic.create (to enforce POST) called user_authenticate in cb39b3de7dcc9d12a64c5f37bcafe6306e9e3412.  It takes a username/password, and returns the username/apikey.\r\n\r\nWe *really* could do with some form of account locking, slowing down of password validation to stop this endpoint getting hammered."}}