API should follow RequireSignInView (#8654)

This commit is contained in:
Lunny Xiao 2019-10-24 13:32:40 +08:00 committed by GitHub
parent bd7709a602
commit 3c63c3ace4
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -862,7 +862,7 @@ func RegisterRoutes(m *macaron.Macaron) {
m.Group("/topics", func() {
m.Get("/search", repo.TopicSearch)
})
}, securityHeaders(), context.APIContexter(), sudo())
}, securityHeaders(), reqTokenBySetting(), context.APIContexter(), sudo())
}
func securityHeaders() macaron.Handler {
@ -874,3 +874,10 @@ func securityHeaders() macaron.Handler {
})
}
}
func reqTokenBySetting() macaron.Handler {
if setting.Service.RequireSignInView {
return reqToken()
}
return func(ctx *macaron.Context) {}
}