Update StatusController, fix unlisted post guest/ap access bug

1 year ago · 83098428bb
parent 3437d9bb48
commit 83098428bb
1 changed files with 1 additions and 1 deletions
--- a/app/Http/Controllers/StatusController.php
+++ b/app/Http/Controllers/StatusController.php
@ -43,7 +43,7 @@ class StatusController extends Controller
            $status['account']['username'] != $username ||
            isset($status['reblog']), 404);

-        abort_if($status['visibility'] != 'public' && ! $request->user(), 403, 'Invalid permission');
+        abort_if(! in_array($status['visibility'], ['public', 'unlisted']) && ! $request->user(), 403, 'Invalid permission');

        if ($request->wantsJson() && (bool) config_cache('federation.activitypub.enabled')) {
            return $this->showActivityPub($request, $status);