From 7dd0262333a51fd35e08ce7bec67871f1c066966 Mon Sep 17 00:00:00 2001
From: Laura Hausmann <laura@hausmann.dev>
Date: Sat, 27 Apr 2024 20:32:31 +0200
Subject: [PATCH] [backend/federation] Add Cache-Control: no-store to
 authorized fetch endpoints

---
 Iceshrimp.Backend/Core/Middleware/AuthorizedFetchMiddleware.cs | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/Iceshrimp.Backend/Core/Middleware/AuthorizedFetchMiddleware.cs b/Iceshrimp.Backend/Core/Middleware/AuthorizedFetchMiddleware.cs
index 9d774f1d..61bffc06 100644
--- a/Iceshrimp.Backend/Core/Middleware/AuthorizedFetchMiddleware.cs
+++ b/Iceshrimp.Backend/Core/Middleware/AuthorizedFetchMiddleware.cs
@@ -28,6 +28,8 @@ public class AuthorizedFetchMiddleware(
 
 		if (attribute != null && config.Value.AuthorizedFetch)
 		{
+			ctx.Response.Headers.CacheControl = "no-store";
+
 			var request = ctx.Request;
 			var ct      = appLifetime.ApplicationStopping;