Fix #4637 - Re-add missing doorkeeper_authorize for /api/v1/verify_credentials (#4650)

2017-08-21 00:41:08 +02:00
parent 110227ac5e
commit 74e5078795
2 changed files with 61 additions and 38 deletions
--- a/app/controllers/api/v1/accounts/credentials_controller.rb
+++ b/app/controllers/api/v1/accounts/credentials_controller.rb
@ -1,6 +1,7 @@
 # frozen_string_literal: true

 class Api::V1::Accounts::CredentialsController < Api::BaseController
+  before_action -> { doorkeeper_authorize! :read }, except: [:update]
  before_action -> { doorkeeper_authorize! :write }, only: [:update]
  before_action :require_user!