From: Tom Hughes <tom@compton.nu>
Date: Mon, 25 Jul 2022 23:30:50 +0000 (+0100)
Subject: Require a logged in user for the iD frame
X-Git-Tag: live~2033
X-Git-Url: https://git.openstreetmap.org./rails.git/commitdiff_plain/aa32dba482c858499d6cc32cecffcdec87b918d4?ds=sidebyside

Require a logged in user for the iD frame

The frame will error if the user is not logged in as it wants
to be able to access their OAuth token.
---

diff --git a/app/controllers/site_controller.rb b/app/controllers/site_controller.rb
index 00b3e78da..02852dc67 100644
--- a/app/controllers/site_controller.rb
+++ b/app/controllers/site_controller.rb
@@ -7,6 +7,7 @@ class SiteController < ApplicationController
   before_action :redirect_browse_params, :only => :index
   before_action :redirect_map_params, :only => [:index, :edit, :export]
   before_action :require_oauth, :only => [:index]
+  before_action :require_user, :only => [:id]
   before_action :update_totp, :only => [:index]
 
   authorize_resource :class => false