From 52cc73b14bca1b85e31b846aaddbb80821c120e8 Mon Sep 17 00:00:00 2001
From: 6543 <6543@obermui.de>
Date: Mon, 4 Nov 2019 18:08:32 +0100
Subject: [PATCH] API issue_subscripton: Put/Delete require tocken

---
 routers/api/v1/api.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/routers/api/v1/api.go b/routers/api/v1/api.go
index b68717f7c875..2ff3768c9be3 100644
--- a/routers/api/v1/api.go
+++ b/routers/api/v1/api.go
@@ -692,8 +692,8 @@ func RegisterRoutes(m *macaron.Macaron) {
 						})
 						m.Group("/subscriptions", func() {
 							m.Get("", bind(api.User{}), repo.GetIssueSubscribers)
-							m.Put("/:user", repo.AddIssueSubscription)
-							m.Delete("/:user", repo.DelIssueSubscription)
+							m.Put("/:user", reqToken(), repo.AddIssueSubscription)
+							m.Delete("/:user", reqToken(), repo.DelIssueSubscription)
 						})
 					})
 				}, mustEnableIssuesOrPulls)