FIX: don't return 200s when login is required to paths

When running `ensure_login_required` it should always happen prior to `check_xhr` cause check xhr will trigger a 200 response
2025-05-21 18:12:32 +08:00 · 2018-02-01 12:26:45 +11:00
parent 7d2283167a
commit f2e7b74d88
28 changed files with 81 additions and 59 deletions
--- a/app/controllers/posts_controller.rb
+++ b/app/controllers/posts_controller.rb
@ -8,7 +8,7 @@ require_dependency 'post_locker'

 class PostsController < ApplicationController

-  before_action :ensure_logged_in, except: [
+  prepend_before_action :check_xhr, :ensure_logged_in, except: [
    :show,
    :replies,
    :by_number,