chinwag/chinwagsocial
chinwag/chinwagsocial
2
0
Fork 0
Code Issues Pull requests Releases 14 Wiki Activity

Change AUTHORIZED_FETCH to not block unauthenticated REST API access (#19803)

Browse source 
New environment variable `DISALLOW_UNAUTHENTICATED_API_ACCESS`
This commit is contained in:
Eugen Rochko 2022-11-05 22:56:03 +01:00 • committed by GitHub
commit 3a41fccc43
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
app/controllers/api/base_controller.rb
View file

@ -133,7 +133,7 @@ class Api::BaseController < ApplicationController
end end
def disallow_unauthenticated_api_access? def disallow_unauthenticated_api_access?
authorized_fetch_mode? ENV['DISALLOW_UNAUTHENTICATED_API_ACCESS'] == 'true' || Rails.configuration.x.whitelist_mode
end end
private private