From 4b040a4ba6ddb31f4130c24f008734477abbc8ad Mon Sep 17 00:00:00 2001 From: Lunny Xiao Date: Thu, 24 Oct 2019 13:32:40 +0800 Subject: [PATCH] API should follow RequireSignInView (#8654) --- routers/api/v1/api.go | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/routers/api/v1/api.go b/routers/api/v1/api.go index 363379381ad2..3451cd5e8ade 100644 --- a/routers/api/v1/api.go +++ b/routers/api/v1/api.go @@ -845,7 +845,7 @@ func RegisterRoutes(m *macaron.Macaron) { m.Group("/topics", func() { m.Get("/search", repo.TopicSearch) }) - }, securityHeaders(), context.APIContexter(), sudo()) + }, securityHeaders(), reqTokenBySetting(), context.APIContexter(), sudo()) } func securityHeaders() macaron.Handler { @@ -857,3 +857,10 @@ func securityHeaders() macaron.Handler { }) } } + +func reqTokenBySetting() macaron.Handler { + if setting.Service.RequireSignInView { + return reqToken() + } + return func(ctx *macaron.Context) {} +}