Fix suspended users being able to access APIs that don't require a user (#18524)
This commit is contained in:
parent
96129c2f10
commit
9f81b9f29a
2 changed files with 6 additions and 0 deletions
|
@ -2,6 +2,7 @@
|
|||
|
||||
class ActivityPub::BaseController < Api::BaseController
|
||||
skip_before_action :require_authenticated_user!
|
||||
skip_before_action :require_not_suspended!
|
||||
skip_around_action :set_locale
|
||||
|
||||
private
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue