Mark non-action methods as protected

This commit is contained in:
Andy Allan 2019-01-09 16:43:41 +01:00
parent fbbabeff1e
commit bda8544d94

View file

@ -5,6 +5,17 @@ class OauthController < ApplicationController
layout "site" layout "site"
def revoke
@token = current_user.oauth_tokens.find_by :token => params[:token]
if @token
@token.invalidate!
flash[:notice] = t(".flash", :application => @token.client_application.name)
end
redirect_to oauth_clients_url(:display_name => @token.user.display_name)
end
protected
def login_required def login_required
authorize_web authorize_web
set_locale set_locale
@ -26,17 +37,6 @@ class OauthController < ApplicationController
any_auth any_auth
end end
def revoke
@token = current_user.oauth_tokens.find_by :token => params[:token]
if @token
@token.invalidate!
flash[:notice] = t(".flash", :application => @token.client_application.name)
end
redirect_to oauth_clients_url(:display_name => @token.user.display_name)
end
protected
def oauth1_authorize def oauth1_authorize
override_content_security_policy_directives(:form_action => []) if CSP_ENFORCE || defined?(CSP_REPORT_URL) override_content_security_policy_directives(:form_action => []) if CSP_ENFORCE || defined?(CSP_REPORT_URL)