API should follow RequireSignInView (go-gitea#8654)

lunny · Oct 24, 2019 · 4b040a4 · 4b040a4
1 parent 63c54f7
commit 4b040a4
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/routers/api/v1/api.go b/routers/api/v1/api.go
@@ -845,7 +845,7 @@ func RegisterRoutes(m *macaron.Macaron) {
 		m.Group("/topics", func() {
 			m.Get("/search", repo.TopicSearch)
 		})
-	}, securityHeaders(), context.APIContexter(), sudo())
+	}, securityHeaders(), reqTokenBySetting(), context.APIContexter(), sudo())
 }
 
 func securityHeaders() macaron.Handler {
@@ -857,3 +857,10 @@ func securityHeaders() macaron.Handler {
 		})
 	}
 }
+
+func reqTokenBySetting() macaron.Handler {
+	if setting.Service.RequireSignInView {
+		return reqToken()
+	}
+	return func(ctx *macaron.Context) {}
+}