From 6e7c896d4c03e97aa873ac44e9f34a5dd90eb263 Mon Sep 17 00:00:00 2001 From: Fire Demon Date: Sat, 1 Aug 2020 17:02:54 -0500 Subject: [Federation] Allow users to access ActivityPub representation of their own posts without a signature --- app/controllers/statuses_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/statuses_controller.rb b/app/controllers/statuses_controller.rb index 5c977d212..6f8e74414 100644 --- a/app/controllers/statuses_controller.rb +++ b/app/controllers/statuses_controller.rb @@ -8,7 +8,7 @@ class StatusesController < ApplicationController layout 'public' - before_action :require_signature!, only: :show, if: -> { request.format == :json && authorized_fetch_mode? } + before_action :require_signature!, only: :show, if: -> { request.format == :json && authorized_fetch_mode? && current_user&.account_id != @account.id } before_action :require_authenticated!, if: -> { @account.require_auth? } before_action -> { require_following!(@account) }, if: -> { request.format != :json && @account.private? } before_action :set_status -- cgit