From 3c63c3ace4bff1e0e796759a4676fcfff3c5c872 Mon Sep 17 00:00:00 2001
From: Lunny Xiao <xiaolunwen@gmail.com>
Date: Thu, 24 Oct 2019 13:32:40 +0800
Subject: [PATCH] API should follow RequireSignInView (#8654)
---
routers/api/v1/api.go | 9 ++++++++-
1 file changed, 8 insertions(+), 1 deletion(-)
diff --git a/routers/api/v1/api.go b/routers/api/v1/api.go
index f8ab9025b7..88791e0233 100644
--- a/routers/api/v1/api.go
+++ b/routers/api/v1/api.go
@@ -862,7 +862,7 @@ func RegisterRoutes(m *macaron.Macaron) {
m.Group("/topics", func() {
m.Get("/search", repo.TopicSearch)
})
- }, securityHeaders(), context.APIContexter(), sudo())
+ }, securityHeaders(), reqTokenBySetting(), context.APIContexter(), sudo())
}
func securityHeaders() macaron.Handler {
@@ -874,3 +874,10 @@ func securityHeaders() macaron.Handler {
})
}
}
+
+func reqTokenBySetting() macaron.Handler {
+ if setting.Service.RequireSignInView {
+ return reqToken()
+ }
+ return func(ctx *macaron.Context) {}
+}