From ffff835b7338a25be96df8747a336f07afc49db2 Mon Sep 17 00:00:00 2001 From: Lunny Xiao Date: Thu, 24 Oct 2019 14:57:24 +0800 Subject: [PATCH] API should follow RequireSignInView (#8654) (#8661) --- routers/api/v1/api.go | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/routers/api/v1/api.go b/routers/api/v1/api.go index 363379381..3451cd5e8 100644 --- a/routers/api/v1/api.go +++ b/routers/api/v1/api.go @@ -845,7 +845,7 @@ func RegisterRoutes(m *macaron.Macaron) { m.Group("/topics", func() { m.Get("/search", repo.TopicSearch) }) - }, securityHeaders(), context.APIContexter(), sudo()) + }, securityHeaders(), reqTokenBySetting(), context.APIContexter(), sudo()) } func securityHeaders() macaron.Handler { @@ -857,3 +857,10 @@ func securityHeaders() macaron.Handler { }) } } + +func reqTokenBySetting() macaron.Handler { + if setting.Service.RequireSignInView { + return reqToken() + } + return func(ctx *macaron.Context) {} +}