From 7125f803a7c0398b7a835c2366ff725e978de72e Mon Sep 17 00:00:00 2001 From: Daniel Supernault Date: Sat, 1 Sep 2018 23:55:55 -0600 Subject: [PATCH] Update FederationController --- app/Http/Controllers/FederationController.php | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/app/Http/Controllers/FederationController.php b/app/Http/Controllers/FederationController.php index 3a4cd61c5..582e64967 100644 --- a/app/Http/Controllers/FederationController.php +++ b/app/Http/Controllers/FederationController.php @@ -140,7 +140,10 @@ class FederationController extends Controller } $user = Profile::whereNull('remote_url')->whereUsername($username)->firstOrFail(); - $timeline = $user->statuses()->orderBy('created_at', 'desc')->paginate(10); + if($user->is_private) { + return response()->json(['error'=>'403', 'msg' => 'private profile'], 403); + } + $timeline = $user->statuses()->whereVisibility('public')->orderBy('created_at', 'desc')->paginate(10); $fractal = new Fractal\Manager(); $resource = new Fractal\Resource\Item($user, new ProfileOutbox()); $res = $fractal->createData($resource)->toArray();