Nulo/forgejo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

#1127: hide user e-mail when API caller isn't signed in

Browse source
This commit is contained in:
Unknwon 2015-07-14 23:21:34 +08:00
parent ccf17a6ecb
commit 4cbbaefd82
2 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
modules/middleware/auth.go
View file

@ -69,6 +69,7 @@ func Toggle(options *ToggleOptions) macaron.Handler {
} }
} }
// Contexter middleware already checks token for user sign in process.
func ApiReqToken() macaron.Handler { func ApiReqToken() macaron.Handler {
return func(ctx *Context) { return func(ctx *Context) {
if !ctx.IsSigned { if !ctx.IsSigned {

5
routers/api/v1/user.go
View file

@ -68,5 +68,10 @@ func GetUserInfo(ctx *middleware.Context) {
} }
return return
} }
// Hide user e-mail when API caller isn't signed in.
if !ctx.IsSigned {
u.Email = ""
}
ctx.JSON(200, &api.User{u.Id, u.Name, u.FullName, u.Email, u.AvatarLink()}) ctx.JSON(200, &api.User{u.Id, u.Name, u.FullName, u.Email, u.AvatarLink()})
} }