techhub/mastodon
2
0
Fork 0
Code Activity

Add read:me OAuth 2.0 scope, allowing more limited access to user data (#29087)

Browse Source
This commit is contained in:
Emelia Smith
2024-04-23 13:47:00 +02:00
committed by GitHub
parent d754b15afb
commit 049b159beb
4 changed files with 17 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/controllers/api/v1/accounts/credentials_controller.rb
View File

@@ -1,7 +1,7 @@
# frozen_string_literal: true
class Api::V1::Accounts::CredentialsController < Api::BaseController
before_action -> { doorkeeper_authorize! :read, :'read:accounts' }, except: [:update]
before_action -> { doorkeeper_authorize! :read, :'read:accounts', :'read:me' }, except: [:update]
before_action -> { doorkeeper_authorize! :write, :'write:accounts' }, only: [:update]
before_action :require_user!