mirrors/retrospring
1
0
Fork 0
mirror of https://github.com/Retrospring/retrospring.git synced 2025-02-13 21:33:20 +01:00
Code Issues Projects Releases Packages Wiki Activity

Put all security related actions behind authentication

Browse source
This commit is contained in:
Andreas Nedbal 2021-12-29 21:26:39 +01:00 • committed by Andreas Nedbal
parent 4008d2fd05
commit dcc781df3d
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/controllers/user_controller.rb
View file

@ -1,7 +1,7 @@
class UserController < ApplicationController
include ThemeHelper
before_action :authenticate_user!, only: %w(edit update edit_privacy update_privacy edit_theme update_theme preview_theme delete_theme data export begin_export)
before_action :authenticate_user!, only: %w(edit update edit_privacy update_privacy edit_theme update_theme preview_theme delete_theme data export begin_export edit_security update_2fa destroy_2fa reset_user_recovery_codes)
def show
@user = User.where('LOWER(screen_name) = ?', params[:username].downcase).first!