diff options
| author |  Inverle <inverle@proton.me>
| 2025-12-04 08:46:11 +0100 |
|---|---|---|
| committer |  GitHub <noreply@github.com>
| 2025-12-04 08:46:11 +0100 |
| commit | 60cf5ea297a17db861e73cd65d7b7862bd6bcc24 (patch) | |
| tree | e1f9a123f79a3f5b449777ea2c17d98ca897adfb /app/layout/layout.phtml | |
| parent | 1621f12a15855b3e1b98d58b6e8effe959926b46 (diff) | |
Improve anonymous authentication logic (#8165)
* Improve anonymous authentication logic
* forgot to git add
* Fix incorrect token check
Because an empty parameter could be just passed if token for the user wasn't set: `&token=`
Diffstat (limited to 'app/layout/layout.phtml')
| -rw-r--r-- | app/layout/layout.phtml | 12 |
1 files changed, 8 insertions, 4 deletions
diff --git a/app/layout/layout.phtml b/app/layout/layout.phtml index fc6675a40..aa89cac96 100644 --- a/app/layout/layout.phtml +++ b/app/layout/layout.phtml @@ -53,8 +53,10 @@ if ($this->rss_title != '') { $url_rss = $url_base; $url_rss['a'] = 'rss'; - $url_rss['params']['user'] = Minz_User::name() ?? ''; - $url_rss['params']['token'] = FreshRSS_Context::userConf()->token; + if (FreshRSS_Auth::hasAccess()) { + $url_rss['params']['user'] = Minz_User::name() ?? ''; + $url_rss['params']['token'] = FreshRSS_Context::userConf()->token; + } unset($url_rss['params']['rid']); if (FreshRSS_Context::userConf()->since_hours_posts_per_rss) { $url_rss['params']['hours'] = FreshRSS_Context::userConf()->since_hours_posts_per_rss; @@ -64,8 +66,10 @@ <?php } if (FreshRSS_Context::isAll() || FreshRSS_Context::isAllAndCategories() || FreshRSS_Context::isAllAndArchived() || FreshRSS_Context::isCategory() || FreshRSS_Context::isFeed()) { $opml_rss = $url_base; $opml_rss['a'] = 'opml'; - $opml_rss['params']['user'] = Minz_User::name() ?? ''; - $opml_rss['params']['token'] = FreshRSS_Context::userConf()->token; + if (FreshRSS_Auth::hasAccess()) { + $opml_rss['params']['user'] = Minz_User::name() ?? ''; + $opml_rss['params']['token'] = FreshRSS_Context::userConf()->token; + } unset($opml_rss['params']['rid']); ?> <link rel="outline" type="text/x-opml" title="OPML" href="<?= Minz_Url::display($opml_rss) ?>" /> |