diff --git a/actions/api.php b/actions/api.php
index ea24cbe4a1..eeee77ec2f 100644
--- a/actions/api.php
+++ b/actions/api.php
@@ -100,7 +100,9 @@ class ApiAction extends Action {
 
 	# Whitelist of API methods that don't need authentication
 	function requires_auth() {
-		static $noauth = array(	'statuses/public_timeline', 
+		static $noauth = array(	'statuses/public_timeline',
+		 						'statuses/user_timeline',
+								'statuses/show',
 								'help/test', 
 								'help/downtime_schedule');
 		if (in_array("$this->api_action/$this->api_method", $noauth)) {