only authenticate on pages we need it

metacpan · Nov 20, 2016 · bc2f0db · bc2f0db
1 parent 41cefae
commit bc2f0db
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/lib/MetaCPAN/Web/Controller/Account.pm b/lib/MetaCPAN/Web/Controller/Account.pm
@@ -13,6 +13,9 @@ sub auto : Private {
     # this is for proxies
     $c->res->header( Vary => 'Cookie' );
 
+    if ( my $token = $c->token ) {
+        $c->authenticate( { token => $token } );
+    }
     unless ( $c->user_exists ) {
         $c->forward('/forbidden');
     }

diff --git a/lib/MetaCPAN/Web/Controller/Root.pm b/lib/MetaCPAN/Web/Controller/Root.pm
@@ -24,9 +24,6 @@ MetaCPAN::Web::Controller::Root - Root Controller for MetaCPAN::Web
 
 sub auto : Private {
     my ( $self, $c ) = @_;
-    if ( my $token = $c->token ) {
-        $c->authenticate( { token => $token } );
-    }
     Log::Log4perl::MDC->put( "ip",  $c->req->address );
     Log::Log4perl::MDC->put( "url", $c->req->uri . '' );
     return 1;