Update ApiV1Controller, enforce public timeline setting

5 years ago · 285bd4854b
parent f87831b542
commit 285bd4854b
1 changed files with 2 additions and 0 deletions
--- a/app/Http/Controllers/Api/ApiV1Controller.php
+++ b/app/Http/Controllers/Api/ApiV1Controller.php
@ -1397,6 +1397,8 @@ class ApiV1Controller extends Controller
     */
    public function timelinePublic(Request $request)
    {
+        abort_if(!config('instance.timeline.local.is_public') && !$request->user(), 403);
+        
        $this->validate($request,[
          'page'        => 'nullable|integer|max:40',
          'min_id'      => 'nullable|integer|min:0|max:' . PHP_INT_MAX,