diff options
author | multiple creatures <dev@multiple-creature.party> | 2020-05-10 03:02:22 -0500 |
---|---|---|
committer | Starfall <admin@plural.cafe> | 2020-05-10 03:05:24 -0500 |
commit | ca3af6c5b00be851e2ced9112429cfc1baa79529 (patch) | |
tree | 3153cede3485885b5645086b585c27a2a9852dfe /app/controllers/api/v1/accounts/follower_accounts_controller.rb | |
parent | 77fa1183cc113e3d3d20140e3545443cf6c7f170 (diff) |
Port monsterfork@58c707c474
make data miners' lives harder by also requiring authentication on account api endpoints
Diffstat (limited to 'app/controllers/api/v1/accounts/follower_accounts_controller.rb')
-rw-r--r-- | app/controllers/api/v1/accounts/follower_accounts_controller.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/app/controllers/api/v1/accounts/follower_accounts_controller.rb b/app/controllers/api/v1/accounts/follower_accounts_controller.rb index 1daa1ed0d..69894f71a 100644 --- a/app/controllers/api/v1/accounts/follower_accounts_controller.rb +++ b/app/controllers/api/v1/accounts/follower_accounts_controller.rb @@ -25,7 +25,7 @@ class Api::V1::Accounts::FollowerAccountsController < Api::BaseController end def hide_results? - (@account.hides_followers? && current_account&.id != @account.id) || (current_account && @account.blocking?(current_account)) + !user_signed_in? || (@account.hides_followers? && current_account&.id != @account.id) || (current_account && @account.blocking?(current_account)) end def default_accounts |