about summary refs log tree commit diff
path: root/app/controllers/api/v1/accounts/search_controller.rb
diff options
context:
space:
mode:
authormultiple creatures <dev@multiple-creature.party>2020-05-10 03:02:22 -0500
committerStarfall <admin@plural.cafe>2020-05-10 03:05:24 -0500
commitca3af6c5b00be851e2ced9112429cfc1baa79529 (patch)
tree3153cede3485885b5645086b585c27a2a9852dfe /app/controllers/api/v1/accounts/search_controller.rb
parent77fa1183cc113e3d3d20140e3545443cf6c7f170 (diff)
Port monsterfork@58c707c474
make data miners' lives harder by also requiring authentication on
account api endpoints
Diffstat (limited to 'app/controllers/api/v1/accounts/search_controller.rb')
-rw-r--r--app/controllers/api/v1/accounts/search_controller.rb1
1 files changed, 1 insertions, 0 deletions
diff --git a/app/controllers/api/v1/accounts/search_controller.rb b/app/controllers/api/v1/accounts/search_controller.rb
index 3061fcb7e..aa8745931 100644
--- a/app/controllers/api/v1/accounts/search_controller.rb
+++ b/app/controllers/api/v1/accounts/search_controller.rb
@@ -12,6 +12,7 @@ class Api::V1::Accounts::SearchController < Api::BaseController
   private
 
   def account_search
+    return Account.none unless user_signed_in?
     AccountSearchService.new.call(
       params[:q],
       current_account,