diff options
author | Alex Gleason <alex@alexgleason.me> | 2021-07-12 22:00:44 -0500 |
---|---|---|
committer | Alex Gleason <alex@alexgleason.me> | 2021-07-12 22:11:32 -0500 |
commit | 1f093cb216ed0d6b0d23b05e1ffbbf55dc72bbee (patch) | |
tree | 2c766ad92a0241126f3dd78d0018ecbe07004f5e /lib/pleroma | |
parent | 9bc1e79c5675efb70e45b63f6530194888b182de (diff) | |
download | pleroma-1f093cb216ed0d6b0d23b05e1ffbbf55dc72bbee.tar.gz |
Moderators: reorganize :admin_api pipeline in Router
Diffstat (limited to 'lib/pleroma')
-rw-r--r-- | lib/pleroma/web/router.ex | 12 |
1 files changed, 8 insertions, 4 deletions
diff --git a/lib/pleroma/web/router.ex b/lib/pleroma/web/router.ex index 72ad14f05..919f4f510 100644 --- a/lib/pleroma/web/router.ex +++ b/lib/pleroma/web/router.ex @@ -96,10 +96,14 @@ defmodule Pleroma.Web.Router do plug(Pleroma.Web.Plugs.AdminSecretAuthenticationPlug) plug(:after_auth) plug(Pleroma.Web.Plugs.EnsureAuthenticatedPlug) - plug(Pleroma.Web.Plugs.UserIsAdminPlug) + plug(Pleroma.Web.Plugs.UserIsStaffPlug) plug(Pleroma.Web.Plugs.IdempotencyPlug) end + pipeline :require_admin do + plug(Pleroma.Web.Plugs.UserIsAdminPlug) + end + pipeline :mastodon_html do plug(:browser) plug(:authenticate) @@ -156,7 +160,7 @@ defmodule Pleroma.Web.Router do end scope "/api/v1/pleroma/admin", Pleroma.Web.AdminAPI do - pipe_through(:admin_api) + pipe_through([:admin_api, :require_admin]) put("/users/disable_mfa", AdminAPIController, :disable_mfa) put("/users/tag", AdminAPIController, :tag_users) @@ -261,7 +265,7 @@ defmodule Pleroma.Web.Router do scope "/api/v1/pleroma/emoji", Pleroma.Web.PleromaAPI do scope "/pack" do - pipe_through(:admin_api) + pipe_through([:admin_api, :require_admin]) post("/", EmojiPackController, :create) patch("/", EmojiPackController, :update) @@ -276,7 +280,7 @@ defmodule Pleroma.Web.Router do # Modifying packs scope "/packs" do - pipe_through(:admin_api) + pipe_through([:admin_api, :require_admin]) get("/import", EmojiPackController, :import_from_filesystem) get("/remote", EmojiPackController, :remote) |