Change auth handling for API request

lib/util/middlewares.js

@@ -176,6 +176,12 @@ exports.loginRequired = function(crowi, app) {
       }
     }
 
+    // is api path
+    var path = req.path || '';
+    if (path.match(/^\/_api\/.+$/)) {
+      return res.sendStatus(403);
+    }
+
     req.session.jumpTo = req.originalUrl;
     return res.redirect('/login');
   };