Skip authentication if API key is empty

koppen · Feb 3, 2016 · 87d040d · 87d040d
1 parent 6a66c34
commit 87d040d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/controllers/github_hook_controller.rb b/app/controllers/github_hook_controller.rb
@@ -45,7 +45,7 @@ def update_repository(logger)
 
   def check_enabled
     User.current = nil
-    unless Setting.sys_api_enabled? && params[:key].to_s == Setting.sys_api_key
+    unless Setting.sys_api_enabled? && (Setting.sys_api_key.empty? || params[:key].to_s == Setting.sys_api_key)
       render :text => 'Access denied. Repository management WS is disabled or key is invalid.', :status => 403
       return false
     end