tootlab-mastodon/app/controllers/api_controller.rb

class ApiController < ApplicationController
  protect_from_forgery with: :null_session
  skip_before_filter :verify_authenticity_token

  protected

  def current_resource_owner
    User.find(doorkeeper_token.resource_owner_id) if doorkeeper_token
  end

  def current_user
    super || current_resource_owner
  end
end
Fixing some bugs, adding pending test examples 2016-03-05 06:50:59 -05:00			`class ApiController < ApplicationController`
			`protect_from_forgery with: :null_session`
Writing out more tests, fixed some bugs 2016-03-20 08:03:06 -04:00			`skip_before_filter :verify_authenticity_token`
Adding doorkeeper, adding a REST API POST /api/statuses Params: status (text contents), in_reply_to_id (optional) GET /api/statuses/:id POST /api/statuses/:id/reblog GET /api/accounts/:id GET /api/accounts/:id/following GET /api/accounts/:id/followers POST /api/accounts/:id/follow POST /api/accounts/:id/unfollow POST /api/follows Params: uri (e.g. user@domain) OAuth authentication is currently disabled, but the API can be used with HTTP Auth. 2016-03-07 06:42:33 -05:00
			`protected`

			`def current_resource_owner`
Improving feed queries, switching API to doorkeeper authentication 2016-03-11 10:47:36 -05:00			`User.find(doorkeeper_token.resource_owner_id) if doorkeeper_token`
Adding doorkeeper, adding a REST API POST /api/statuses Params: status (text contents), in_reply_to_id (optional) GET /api/statuses/:id POST /api/statuses/:id/reblog GET /api/accounts/:id GET /api/accounts/:id/following GET /api/accounts/:id/followers POST /api/accounts/:id/follow POST /api/accounts/:id/unfollow POST /api/follows Params: uri (e.g. user@domain) OAuth authentication is currently disabled, but the API can be used with HTTP Auth. 2016-03-07 06:42:33 -05:00			`end`

			`def current_user`
			`super \|\| current_resource_owner`
			`end`
Fixing some bugs, adding pending test examples 2016-03-05 06:50:59 -05:00			`end`