Allow all API calls, even if the site is configured as private. The

API Actions will decide whether something requires auth or a redirect.

diff --git a/index.php b/index.php
index 3acdba3754a7c095618efe6eacbc96dffd98e9c4..577b491ed05b677dc9480d27fd04cdafe4a7fa21 100644 (file)
--- a/index.php
+++ b/index.php
@@ -239,6 +239,7 @@ function main()
     if (!$user && common_config('site', 'private')
         && !isLoginAction($action)
         && !preg_match('/rss$/', $action)
+        && !preg_match('/^Api/', $action)
     ) {
         common_redirect(common_local_url('login'));
         return;