about summary refs log tree commit diff
diff options
context:
space:
mode:
authorFire Demon <firedemon@creature.cafe>2020-08-01 17:02:54 -0500
committerFire Demon <firedemon@creature.cafe>2020-08-30 05:45:17 -0500
commit6e7c896d4c03e97aa873ac44e9f34a5dd90eb263 (patch)
tree1132288f9d90c19491aa99688ecfacccc63907b5
parent93d7dc54bf523d8c52794e395947b477b114e3c1 (diff)
[Federation] Allow users to access ActivityPub representation of their own posts without a signature
-rw-r--r--app/controllers/statuses_controller.rb2
1 files changed, 1 insertions, 1 deletions
diff --git a/app/controllers/statuses_controller.rb b/app/controllers/statuses_controller.rb
index 5c977d212..6f8e74414 100644
--- a/app/controllers/statuses_controller.rb
+++ b/app/controllers/statuses_controller.rb
@@ -8,7 +8,7 @@ class StatusesController < ApplicationController
 
   layout 'public'
 
-  before_action :require_signature!, only: :show, if: -> { request.format == :json && authorized_fetch_mode? }
+  before_action :require_signature!, only: :show, if: -> { request.format == :json && authorized_fetch_mode? && current_user&.account_id != @account.id }
   before_action :require_authenticated!, if: -> { @account.require_auth? }
   before_action -> { require_following!(@account) }, if: -> { request.format != :json && @account.private? }
   before_action :set_status