tykayn/mastodon
1
0
Fork 0
mirror of https://framagit.org/tykayn/mastodon.git synced 2023-08-25 08:33:12 +02:00
Code Issues Projects Releases Wiki Activity

Return 403 on the method if registrations are not open

Browse Source
This commit is contained in:
Eugen Rochko 2018-12-20 01:52:10 +01:00
parent bcd24eeab7
commit ddb6e5ac7f
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
app/controllers/api/v1/accounts_controller.rb
View File

@ -5,11 +5,12 @@ class Api::V1::AccountsController < Api::BaseController
before_action -> { doorkeeper_authorize! :follow, :'write:follows' }, only: [:follow, :unfollow]
before_action -> { doorkeeper_authorize! :follow, :'write:mutes' }, only: [:mute, :unmute]
before_action -> { doorkeeper_authorize! :follow, :'write:blocks' }, only: [:block, :unblock]
before_action -> { doorkeeper_authorize! }, only: [:create]
before_action -> { doorkeeper_authorize! :write, :'write:accounts' }, only: [:create]
before_action :require_user!, except: [:show, :create]
before_action :set_account, except: [:create]
before_action :check_account_suspension, only: [:show]
before_action :check_enabled_registrations, only: [:create]
respond_to :json
@ -77,4 +78,8 @@ class Api::V1::AccountsController < Api::BaseController
def account_params
params.permit(:username, :email, :password)
end
def check_enabled_registrations
forbidden if single_user_mode? || !Setting.open_registrations
end
end