From 3c63c3ace4bff1e0e796759a4676fcfff3c5c872 Mon Sep 17 00:00:00 2001 From: Lunny Xiao Date: Thu, 24 Oct 2019 13:32:40 +0800 Subject: [PATCH] API should follow RequireSignInView (#8654) --- routers/api/v1/api.go | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/routers/api/v1/api.go b/routers/api/v1/api.go index f8ab9025b7..88791e0233 100644 --- a/routers/api/v1/api.go +++ b/routers/api/v1/api.go @@ -862,7 +862,7 @@ func RegisterRoutes(m *macaron.Macaron) { m.Group("/topics", func() { m.Get("/search", repo.TopicSearch) }) - }, securityHeaders(), context.APIContexter(), sudo()) + }, securityHeaders(), reqTokenBySetting(), context.APIContexter(), sudo()) } func securityHeaders() macaron.Handler { @@ -874,3 +874,10 @@ func securityHeaders() macaron.Handler { }) } } + +func reqTokenBySetting() macaron.Handler { + if setting.Service.RequireSignInView { + return reqToken() + } + return func(ctx *macaron.Context) {} +}