From ec48b8ef8c491da5d0c127730cff6402a12982fa Mon Sep 17 00:00:00 2001
From: default <nobody@localhost>
Date: Wed, 12 Apr 2023 20:33:42 +0200
Subject: [PATCH] Relationships can only be queried if logged in.

---
 mastoapi.c | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/mastoapi.c b/mastoapi.c
index ac2bb30..b579a76 100644
--- a/mastoapi.c
+++ b/mastoapi.c
@@ -679,10 +679,13 @@ int mastoapi_get_handler(const xs_dict *req, const char *q_path,
     else
     if (strcmp(cmd, "/accounts/relationships") == 0) {
         /* find if an account is followed, blocked, etc. */
+        /* the account to get relationships about is in args "id[]" */
         /* dummy by now */
-        *body  = xs_dup("[]");
-        *ctype = "application/json";
-        status = 200;
+        if (logged_in) {
+            *body  = xs_dup("[]");
+            *ctype = "application/json";
+            status = 200;
+        }
     }
     else
     if (xs_startswith(cmd, "/accounts/")) {