chris/pixelfed
1
0
Fork 0
forked from mirror/pixelfed
Code Pull requests Activity

Update PublicApiController, return empty 403 response

Browse source
This commit is contained in:
Daniel Supernault 2022-03-31 00:14:48 -06:00
parent 6ba7d43391
commit d9e4cc3df6
No known key found for this signature in database
GPG key ID: 0DEF1C662C9033F7
1 changed files with 6 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
app/Http/Controllers/PublicApiController.php
View file

@ -422,8 +422,8 @@ class PublicApiController extends Controller
public function homeTimelineApi(Request $request)
{
if(!Auth::check()) {
return abort(403);
if(!$request->user()) {
return response('', 403);
}
$this->validate($request,[
@ -586,7 +586,10 @@ class PublicApiController extends Controller
public function networkTimelineApi(Request $request)
{
abort_if(!Auth::check(), 403);
if(!$request->user()) {
return response('', 403);
}
abort_if(config('federation.network_timeline') == false, 404);
$this->validate($request,[