Fix /actor needlessly reading session cookie and varying on Signature (#24664)

2023-04-26 11:42:26 +02:00 · 2023-04-26 11:42:26 +02:00 · 62ab7506d6
parent 301e03eb8c
commit 62ab7506d6
1 changed files with 7 additions and 4 deletions
--- a/app/controllers/instance_actors_controller.rb
+++ b/app/controllers/instance_actors_controller.rb
@ -1,10 +1,13 @@
 # frozen_string_literal: true

-class InstanceActorsController < ApplicationController
-  include AccountControllerConcern
+class InstanceActorsController < ActivityPub::BaseController
+  vary_by ''

-  skip_before_action :check_account_confirmation
-  skip_around_action :set_locale
+  serialization_scope nil
+
+  before_action :set_account
+  skip_before_action :require_functional!
+  skip_before_action :update_user_sign_in

  def show
    expires_in 10.minutes, public: true