@@ -20,7 +20,7 @@ $path = str_replace('/api/', '', $path);
|
||||
$segments = explode('/', trim($path, '/'));
|
||||
$resource = $segments[0] ?? '';
|
||||
|
||||
if ($resource !== 'session') {
|
||||
if ($resource !== 'session' && $resource !== 'login' && $resource !== 'logout') {
|
||||
$loggedin = isset($_SESSION['neptune_loggedin']) && $_SESSION['neptune_loggedin'] === true;
|
||||
if (!$loggedin) {
|
||||
http_response_code(401);
|
||||
|
||||
Reference in New Issue
Block a user