about summary refs log tree commit diff
path: root/app/controllers/activitypub
diff options
context:
space:
mode:
authorEugen Rochko <eugen@zeonfederated.com>2022-05-26 22:04:05 +0200
committerGitHub <noreply@github.com>2022-05-26 22:04:05 +0200
commit9f81b9f29a14093cefcdbf09058ace089cd8e06b (patch)
tree0e2b0528375b2fd01b0fdf05da775596173f59f3 /app/controllers/activitypub
parent96129c2f10a82520648f6ae04e585cf797403617 (diff)
Fix suspended users being able to access APIs that don't require a user (#18524)
Diffstat (limited to 'app/controllers/activitypub')
-rw-r--r--app/controllers/activitypub/base_controller.rb1
1 files changed, 1 insertions, 0 deletions
diff --git a/app/controllers/activitypub/base_controller.rb b/app/controllers/activitypub/base_controller.rb
index 196d85a32..b8a7e0ab9 100644
--- a/app/controllers/activitypub/base_controller.rb
+++ b/app/controllers/activitypub/base_controller.rb
@@ -2,6 +2,7 @@
 
 class ActivityPub::BaseController < Api::BaseController
   skip_before_action :require_authenticated_user!
+  skip_before_action :require_not_suspended!
   skip_around_action :set_locale
 
   private