techhub/mastodon
2
0
Fork 0
Code Activity

Assert usage of client credentials for account registration (#34828)

Browse Source
This commit is contained in:
Emelia Smith
2025-05-28 14:09:32 +02:00
committed by GitHub
parent 6ffa262546
commit a73ade526a
4 changed files with 28 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
app/controllers/api/v1/accounts_controller.rb
View File

@@ -10,6 +10,7 @@ class Api::V1::AccountsController < Api::BaseController
before_action -> { doorkeeper_authorize! :write, :'write:accounts' }, only: [:create]
before_action :require_user!, except: [:index, :show, :create]
before_action :require_client_credentials!, only: [:create]
before_action :set_account, except: [:index, :create]
before_action :set_accounts, only: [:index]
before_action :check_account_approval, except: [:index, :create]