mastofe

commit: 720d1f8f3d6ffbc1729e7523bd4b663703ee2f24
parent: b746a931a5465b0ebf62e2a72e8fbea9e0f7433c
Author: Eugen Rochko <eugen@zeonfederated.com>
Date:   Sun, 23 Oct 2016 12:08:52 +0200

Restrict access to oauth/applications to admins only

Diffstat:
M
config/initializers/doorkeeper.rb
2
+-

1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/config/initializers/doorkeeper.rb b/config/initializers/doorkeeper.rb
@@ -15,7 +15,7 @@ Doorkeeper.configure do
 
   # If you want to restrict access to the web interface for adding oauth authorized applications, you need to declare the block below.
   admin_authenticator do
-    current_user || redirect_to(new_user_session_url)
+    (current_user && current_user.admin?) || redirect_to(new_user_session_url)
   end
 
   # Authorization Code expiration time (default 10 minutes).