Issue 11101: Fix API authentification
This commit is contained in:
parent
0165811f09
commit
0a3026abce
|
@ -26,12 +26,17 @@ use Friendica\Database\DBA;
|
|||
use Friendica\DI;
|
||||
use Friendica\Module\BaseApi;
|
||||
use Friendica\Util\Network;
|
||||
use Psr\Http\Message\ResponseInterface;
|
||||
|
||||
/**
|
||||
* Apps class to register new OAuth clients
|
||||
*/
|
||||
class Apps extends BaseApi
|
||||
{
|
||||
public function run(array $request = [], bool $scopecheck = true): ResponseInterface
|
||||
{
|
||||
return parent::run($request, false);
|
||||
}
|
||||
/**
|
||||
* @throws \Friendica\Network\HTTPException\InternalServerErrorException
|
||||
*/
|
||||
|
|
|
@ -79,19 +79,21 @@ class BaseApi extends BaseModule
|
|||
*
|
||||
* @throws HTTPException\ForbiddenException
|
||||
*/
|
||||
public function run(array $request = []): ResponseInterface
|
||||
public function run(array $request = [], bool $scopecheck = true): ResponseInterface
|
||||
{
|
||||
switch ($this->server['REQUEST_METHOD'] ?? Router::GET) {
|
||||
case Router::DELETE:
|
||||
case Router::PATCH:
|
||||
case Router::POST:
|
||||
case Router::PUT:
|
||||
self::checkAllowedScope(self::SCOPE_WRITE);
|
||||
if ($scopecheck) {
|
||||
switch ($this->server['REQUEST_METHOD'] ?? Router::GET) {
|
||||
case Router::DELETE:
|
||||
case Router::PATCH:
|
||||
case Router::POST:
|
||||
case Router::PUT:
|
||||
self::checkAllowedScope(self::SCOPE_WRITE);
|
||||
|
||||
if (!self::getCurrentUserID()) {
|
||||
throw new HTTPException\ForbiddenException($this->t('Permission denied.'));
|
||||
}
|
||||
break;
|
||||
if (!self::getCurrentUserID()) {
|
||||
throw new HTTPException\ForbiddenException($this->t('Permission denied.'));
|
||||
}
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
return parent::run($request);
|
||||
|
|
Loading…
Reference in New Issue
Block a user