API should follow RequireSignInView (#8654)

diff --git a/routers/api/v1/api.go b/routers/api/v1/api.go
index f8ab9025b780ec753ec863e884c7bc4a880cbb6d..88791e023339a5ebddfd6f4f528c18d266d1415a 100644 (file)
--- a/routers/api/v1/api.go
+++ b/routers/api/v1/api.go
@@ -862,7 +862,7 @@ func RegisterRoutes(m *macaron.Macaron) {
                m.Group("/topics", func() {
                        m.Get("/search", repo.TopicSearch)
                })
-       }, securityHeaders(), context.APIContexter(), sudo())
+       }, securityHeaders(), reqTokenBySetting(), context.APIContexter(), sudo())
 }
 
 func securityHeaders() macaron.Handler {
@@ -874,3 +874,10 @@ func securityHeaders() macaron.Handler {
                })
        }
 }
+
+func reqTokenBySetting() macaron.Handler {
+       if setting.Service.RequireSignInView {
+               return reqToken()
+       }
+       return func(ctx *macaron.Context) {}
+}