X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=actions%2Fapi.php;h=b8da852b536d469682f6fcee277894247696695e;hb=b4e649fe906a793cd5e62d6390065ea5d41c40db;hp=8762b4bcd3efc974831252987f72b8bb33bd4041;hpb=8295402fb30a3854bae3b9d6c457c7c0e432c51a;p=quix0rs-gnu-social.git

diff --git a/actions/api.php b/actions/api.php
index 8762b4bcd3..b8da852b53 100644
--- a/actions/api.php
+++ b/actions/api.php
@@ -67,6 +67,7 @@ class ApiAction extends Action
                     $this->process_command();
                 } else {
                     # basic authentication failed
+                    common_log(LOG_WARNING, "Failed API auth attempt, nickname: $nickname.");
                     $this->show_basic_auth_error();
                 }
             }
@@ -143,8 +144,8 @@ class ApiAction extends Action
         }
 
         if (in_array($fullname, $bareauth)) {
-            # bareauth: only needs auth if without an argument
-            if ($this->api_arg) {
+            # bareauth: only needs auth if without an argument or query param specifying user
+            if ($this->api_arg || $this->arg('id') || is_numeric($this->arg('user_id')) || $this->arg('screen_name')) {
                 return false;
             } else {
                 return true;