core
/
gitea
6
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

API should follow RequireSignInView (#8654)

This commit is contained in:
Lunny Xiao 2019-10-24 13:32:40 +08:00 committed by GitHub
parent bd7709a602
commit 3c63c3ace4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
routers/api/v1/api.go
View File

@ -862,7 +862,7 @@ func RegisterRoutes(m *macaron.Macaron) {
m.Group("/topics", func() {
m.Get("/search", repo.TopicSearch)
})
}, securityHeaders(), context.APIContexter(), sudo())
}, securityHeaders(), reqTokenBySetting(), context.APIContexter(), sudo())
}
func securityHeaders() macaron.Handler {
@ -874,3 +874,10 @@ func securityHeaders() macaron.Handler {
})
}
}
func reqTokenBySetting() macaron.Handler {
if setting.Service.RequireSignInView {
return reqToken()
}
return func(ctx *macaron.Context) {}
}