Browse Source

Fix api endpoints

Daniel Supernault 1 year ago
parent
commit
62b9eef805

+ 1 - 2
app/Http/Controllers/Api/ApiV1Controller.php

@@ -956,8 +956,7 @@ class ApiV1Controller extends Controller
      */
      */
     public function accountRelationshipsById(Request $request)
     public function accountRelationshipsById(Request $request)
     {
     {
-        abort_if(!$request->user() || !$request->user()->token(), 403);
-        abort_unless($request->user()->tokenCan('read'), 403);
+        abort_if(!$request->user(), 403);
 
 
         $this->validate($request, [
         $this->validate($request, [
             'id'    => 'required|array|min:1|max:20',
             'id'    => 'required|array|min:1|max:20',

+ 2 - 0
app/Http/Controllers/ComposeController.php

@@ -260,6 +260,8 @@ class ComposeController extends Controller
             $q = mb_substr($q, 1);
             $q = mb_substr($q, 1);
         }
         }
 
 
+        $user = $request->user();
+
         abort_if($user->has_roles && !UserRoleService::can('can-post', $user->id), 403, 'Invalid permissions for this action');
         abort_if($user->has_roles && !UserRoleService::can('can-post', $user->id), 403, 'Invalid permissions for this action');
 
 
         $blocked = UserFilter::whereFilterableType('App\Profile')
         $blocked = UserFilter::whereFilterableType('App\Profile')