Twitter-compatible API: white listed user_timeline and show as per twitter

darcs-hash:20080718023334-ca946-5d158ade124318f7f846d1f8e0f35ccf1a234027.gz
This commit is contained in:
zach 2008-07-17 22:33:34 -04:00
parent 6ad6e4aa50
commit 6125785064

View File

@ -101,6 +101,8 @@ class ApiAction extends Action {
# Whitelist of API methods that don't need authentication
function requires_auth() {
static $noauth = array( 'statuses/public_timeline',
'statuses/user_timeline',
'statuses/show',
'help/test',
'help/downtime_schedule');
if (in_array("$this->api_action/$this->api_method", $noauth)) {