mirror of https://github.com/mastodon/mastodon.git
Disable API access when login is disabled (#7289)
parent
295e3ef02b
commit
f62ee1ddb0
|
@ -66,8 +66,10 @@ class Api::BaseController < ApplicationController
|
|||
end
|
||||
|
||||
def require_user!
|
||||
if current_user
|
||||
if current_user && !current_user.disabled?
|
||||
set_user_activity
|
||||
elsif current_user
|
||||
render json: { error: 'Your login is currently disabled' }, status: 403
|
||||
else
|
||||
render json: { error: 'This method requires an authenticated user' }, status: 422
|
||||
end
|
||||
|
|
Loading…
Reference in New Issue