chris
/
pixelfed
forked from mirror/pixelfed
1
0
Fork 0
Code Pull Requests Activity

Updaet PublicApiController, disable legacy public access to local timeline

This commit is contained in:
Daniel Supernault 2022-03-31 00:04:04 -06:00
parent e7783af686
commit 6ba7d43391
No known key found for this signature in database
GPG Key ID: 0DEF1C662C9033F7
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
app/Http/Controllers/PublicApiController.php
View File

@ -293,8 +293,8 @@ class PublicApiController extends Controller
'limit' => 'nullable|integer|max:30'
]);
if(config('instance.timeline.local.is_public') == false && !Auth::check()) {
abort(403, 'Authentication required.');
if(!$request->user()) {
return response('', 403);
}
$page = $request->input('page');