Add token check to tab removal.

Access headers.
quantcdn · Jul 28, 2021 · a660901 · a660901
1 parent 2f4c494
commit a660901
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/quant.module b/quant.module
@@ -22,6 +22,10 @@ use Symfony\Component\HttpKernel\Exception\ServiceUnavailableHttpException;
  * Implements hook_menu_local_tasks_alter().
  */
 function quant_menu_local_tasks_alter(&$data, $route_name) {
+  if (!\Drupal::requestStack()->getCurrentRequest()->headers->get('quant-token')) {
+    return;
+  }
+
   if (\Drupal::currentUser()->isAnonymous()) {
     unset($data['tabs']);
   }