You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
mastodon/app/controllers/api
Claire 62c6e12fa5
Fix admin API unconditionally requiring CSRF token (#17975)
Fixes #17898

Since #17204, the admin API has only been available through the web
application because of the unconditional requirement to provide a valid CSRF
token.

This commit changes it back to `null_session`, which should make it work
both with session-based authentication (provided a CSRF token) and with a
bearer token.
3 years ago
..
v1 Fix admin API unconditionally requiring CSRF token (#17975) 3 years ago
v2 Fix /api/v1/admin/accounts (#17887) 3 years ago
web Refactor formatter (#17828) 3 years ago
base_controller.rb Fix locale not being set in REST API (#17847) 3 years ago
oembed_controller.rb Fix OEmbed leaking information about existence of non-public statuses (#12930) 5 years ago