about summary refs log tree commit diff
path: root/app/controllers/api/v1/accounts/follower_accounts_controller.rb
diff options
context:
space:
mode:
authormultiple creatures <dev@multiple-creature.party>2020-05-10 03:02:22 -0500
committerStarfall <admin@plural.cafe>2020-05-10 03:05:24 -0500
commitca3af6c5b00be851e2ced9112429cfc1baa79529 (patch)
tree3153cede3485885b5645086b585c27a2a9852dfe /app/controllers/api/v1/accounts/follower_accounts_controller.rb
parent77fa1183cc113e3d3d20140e3545443cf6c7f170 (diff)
Port monsterfork@58c707c474
make data miners' lives harder by also requiring authentication on
account api endpoints
Diffstat (limited to 'app/controllers/api/v1/accounts/follower_accounts_controller.rb')
-rw-r--r--app/controllers/api/v1/accounts/follower_accounts_controller.rb2
1 files changed, 1 insertions, 1 deletions
diff --git a/app/controllers/api/v1/accounts/follower_accounts_controller.rb b/app/controllers/api/v1/accounts/follower_accounts_controller.rb
index 1daa1ed0d..69894f71a 100644
--- a/app/controllers/api/v1/accounts/follower_accounts_controller.rb
+++ b/app/controllers/api/v1/accounts/follower_accounts_controller.rb
@@ -25,7 +25,7 @@ class Api::V1::Accounts::FollowerAccountsController < Api::BaseController
   end
 
   def hide_results?
-    (@account.hides_followers? && current_account&.id != @account.id) || (current_account && @account.blocking?(current_account))
+    !user_signed_in? || (@account.hides_followers? && current_account&.id != @account.id) || (current_account && @account.blocking?(current_account))
   end
 
   def default_accounts