Ben Tranter

Security vulnerability in token logic

1

Steps to reproduce: 1. Start a fresh instance of Dingo. 2. Create a new user (so the user ID `1` exists) 3. In `app/model/token.go`, change the `NewToken` function so it...

The response for `/v2/customers/my/invoices/{uuid}/pdf` contains a `content-type` header in the response, so we should include that in the spec.

Right now, all of the endpoints in the public API handle the OPTIONS request to support CORS. This currently is not reflected in the spec, so we should consider adding...

For users of [Buffalo](https://github.com/gobuffalo/buffalo) along with the `openidConnect` provider, the default generated code will always contain an error. See this snippet: ```go package actions import ( "fmt" "os" "github.com/gobuffalo/buffalo" "github.com/markbates/goth"...