Slon/Api/V1/Statuses: Don't require authorization for 'context' endpoint

This commit is contained in:
Alec Murphy 2025-03-21 09:18:51 -04:00
parent c5378f5cfd
commit 0d88ccf0c4

View file

@ -213,9 +213,6 @@ U0 @slon_api_v1_statuses_get(SlonHttpSession* session)
JsonItem* poll_choice = NULL;
JsonArray* own_votes = NULL;
if (@slon_api_authorized(session)) {
SLON_AUTH_ACCOUNT_ID
if (session->path_count() > 4 && !StrICmp("context", session->path(4))) {
JsonObject* context = Json.CreateObject(slon_mem_task);
context->set("ancestors", Json.CreateArray(slon_mem_task), JSON_ARRAY);
@ -238,6 +235,9 @@ U0 @slon_api_v1_statuses_get(SlonHttpSession* session)
return;
}
if (@slon_api_authorized(session)) {
SLON_AUTH_ACCOUNT_ID
status = @slon_api_find_status_by_id(id, NULL);
if (status) {
status = Json.Clone(status, session->mem_task);