Enforcement of OAuth scopes check for authenticated API endpoints, :skip_plug plug...
authorIvan Tashkinov <ivantashkinov@gmail.com>
Mon, 6 Apr 2020 07:20:44 +0000 (10:20 +0300)
committerIvan Tashkinov <ivantashkinov@gmail.com>
Mon, 6 Apr 2020 07:20:44 +0000 (10:20 +0300)
commitfc81e5a49c34224e07e85f490a30f92db0835d45
tree347f7eee028404e7e1422ca94ce837bda756e3b3
parent8444e7ee9651f3b1836954a3891b5ae26ee79f99
Enforcement of OAuth scopes check for authenticated API endpoints, :skip_plug plug to mark a plug explicitly skipped (disabled).
14 files changed:
lib/pleroma/plugs/auth_expected_plug.ex [new file with mode: 0644]
lib/pleroma/plugs/oauth_scopes_plug.ex
lib/pleroma/plugs/plug_helper.ex [new file with mode: 0644]
lib/pleroma/web/masto_fe_controller.ex
lib/pleroma/web/mastodon_api/controllers/account_controller.ex
lib/pleroma/web/mastodon_api/controllers/mastodon_api_controller.ex
lib/pleroma/web/mastodon_api/controllers/suggestion_controller.ex
lib/pleroma/web/oauth/oauth_controller.ex
lib/pleroma/web/pleroma_api/controllers/pleroma_api_controller.ex
lib/pleroma/web/router.ex
lib/pleroma/web/twitter_api/twitter_api_controller.ex
lib/pleroma/web/web.ex
test/web/mastodon_api/controllers/suggestion_controller_test.exs
test/web/pleroma_api/controllers/pleroma_api_controller_test.exs