API should follow RequireSignInView (#8654)

go-gitea · Oct 24, 2019 · 3c63c3a · 3c63c3a
1 parent bd7709a
commit 3c63c3a
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/routers/api/v1/api.go b/routers/api/v1/api.go
@@ -862,7 +862,7 @@ func RegisterRoutes(m *macaron.Macaron) {
 		m.Group("/topics", func() {
 			m.Get("/search", repo.TopicSearch)
 		})
-	}, securityHeaders(), context.APIContexter(), sudo())
+	}, securityHeaders(), reqTokenBySetting(), context.APIContexter(), sudo())
 }
 
 func securityHeaders() macaron.Handler {
@@ -874,3 +874,10 @@ func securityHeaders() macaron.Handler {
 		})
 	}
 }
+
+func reqTokenBySetting() macaron.Handler {
+	if setting.Service.RequireSignInView {
+		return reqToken()
+	}
+	return func(ctx *macaron.Context) {}
+}