Cleanup unused authorization checks handled by spring-security

1 files changed, 4 insertions, 9 deletions

diff --git a/src/main/java/com/juick/www/controllers/Settings.java b/src/main/java/com/juick/www/controllers/Settings.java
index 1e40b9d1..0b486766 100644
--- a/src/main/java/com/juick/www/controllers/Settings.java
+++ b/src/main/java/com/juick/www/controllers/Settings.java
@@ -91,18 +91,13 @@ public class Settings {
     protected String doGet(
             @Visitor User visitor,
             Locale locale,
-            HttpServletRequest request,
-            HttpServletResponse response, ModelMap model) throws IOException {
-        if (visitor.isAnonymous()) {
-            response.sendRedirect("/login");
-        }
+            @RequestParam(required = false, defaultValue = "main") String page,
+            @RequestParam(required = false) String code, ModelMap model) throws IOException {
         visitor.setAvatar(webApp.getAvatarWebPath(visitor));
         List<String> pages = Arrays.asList("main", "password", "about", "auth-email", "privacy");
-        String page = request.getParameter("page");
-        if (StringUtils.isEmpty(page) || !pages.contains(page)) {
+        if (!pages.contains(page)) {
             page = "main";
         }
-
         model.addAttribute("title", ResourceBundle.getBundle("messages", locale).getString("link.settings"));
         model.addAttribute("visitor", visitor);
         model.addAttribute("tags", tagService.getPopularTags());
@@ -120,7 +115,7 @@ public class Settings {
         model.addAttribute("notify_options", subscriptionService.getNotifyOptions(visitor));
         model.addAttribute("userinfo", userService.getUserInfo(visitor));
         if (page.equals("auth-email")) {
-            if (emailService.verifyAddressByCode(visitor.getUid(), request.getParameter("code"))) {
+            if (emailService.verifyAddressByCode(visitor.getUid(), code)) {
                 model.addAttribute("result", "OK!");
             } else {
                 model.addAttribute("result", "Sorry, code unknown.");