From 02d272cf496e12b1c7f72d46799243309d222250 Mon Sep 17 00:00:00 2001
From: Eugen Rochko <eugen@zeonfederated.com>
Date: Tue, 14 Jan 2020 08:52:32 +0100
Subject: [PATCH] Fix access to OEmbed endpoint in secure mode (#12864)
---
app/controllers/api/oembed_controller.rb | 2 ++
1 file changed, 2 insertions(+)
diff --git a/app/controllers/api/oembed_controller.rb b/app/controllers/api/oembed_controller.rb
index 37a163cd3..c8c60b1cf 100644
--- a/app/controllers/api/oembed_controller.rb
+++ b/app/controllers/api/oembed_controller.rb
@@ -3,6 +3,8 @@
class Api::OEmbedController < Api::BaseController
respond_to :json
+ skip_before_action :require_authenticated_user!
+
def show
@status = status_finder.status
render json: @status, serializer: OEmbedSerializer, width: maxwidth_or_default, height: maxheight_or_default