diff options
author | Eugen Rochko <eugen@zeonfederated.com> | 2022-05-26 22:04:05 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2022-05-26 22:04:05 +0200 |
commit | 9f81b9f29a14093cefcdbf09058ace089cd8e06b (patch) | |
tree | 0e2b0528375b2fd01b0fdf05da775596173f59f3 /app/controllers/activitypub | |
parent | 96129c2f10a82520648f6ae04e585cf797403617 (diff) |
Fix suspended users being able to access APIs that don't require a user (#18524)
Diffstat (limited to 'app/controllers/activitypub')
-rw-r--r-- | app/controllers/activitypub/base_controller.rb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/app/controllers/activitypub/base_controller.rb b/app/controllers/activitypub/base_controller.rb index 196d85a32..b8a7e0ab9 100644 --- a/app/controllers/activitypub/base_controller.rb +++ b/app/controllers/activitypub/base_controller.rb @@ -2,6 +2,7 @@ class ActivityPub::BaseController < Api::BaseController skip_before_action :require_authenticated_user! + skip_before_action :require_not_suspended! skip_around_action :set_locale private |