From d877c11d32b1dd0a6b291aa70cb369d2b1af71c6 Mon Sep 17 00:00:00 2001
From: Pierre-Yves Chibon <pingou@pingoured.fr>
Date: Jun 23 2016 11:25:26 +0000
Subject: The API endpoints for the internal API should be localonly


---

diff --git a/pagure/internal/__init__.py b/pagure/internal/__init__.py
index ba6a376..66639e7 100644
--- a/pagure/internal/__init__.py
+++ b/pagure/internal/__init__.py
@@ -176,6 +176,7 @@ def ticket_add_comment():
 
 
 @PV.route('/pull-request/merge', methods=['POST'])
+@localonly
 def mergeable_request_pull():
     """ Returns if the specified pull-request can be merged or not.
     """
@@ -236,6 +237,7 @@ def mergeable_request_pull():
 
 
 @PV.route('/pull-request/ready', methods=['POST'])
+@localonly
 def get_pull_request_ready_branch():
     """ Return the list of branches that have commits not in the main
     branch/repo (thus for which one could open a PR) and the number of
@@ -334,6 +336,7 @@ def get_pull_request_ready_branch():
 @PV.route('/<repo>/issue/template', methods=['POST'])
 @PV.route('/fork/<username>/<repo>/issue/template',
            methods=['POST'])
+@localonly
 def get_ticket_template(repo, username=None):
     """ Return the template asked for the specified project
     """