From fdef4caa65f6f3ea484e88a602c8c293f2715383 Mon Sep 17 00:00:00 2001
From: Hide_D <hided62@gmail.com>
Date: Tue, 7 Mar 2023 02:30:31 +0900
Subject: [PATCH] =?UTF-8?q?feat:=20=EC=99=B8=EB=B6=80=20=ED=98=B8=EC=B6=9C?=
 =?UTF-8?q?=EC=9D=B4=20=EB=B6=88=EA=B0=80=EB=8A=A5=ED=95=9C=20API=20?=
 =?UTF-8?q?=ED=83=80=EC=9E=85=20=EC=A0=95=EC=9D=98?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/sammo/APIHelper.php | 3 +++
 src/sammo/BaseAPI.php   | 1 +
 2 files changed, 4 insertions(+)

diff --git a/src/sammo/APIHelper.php b/src/sammo/APIHelper.php
index 36c49caf..d98f7eca 100644
--- a/src/sammo/APIHelper.php
+++ b/src/sammo/APIHelper.php
@@ -53,6 +53,9 @@ class APIHelper
 
         try {
             $obj = buildAPIExecutorClass($actionPath, $rootPath, $actionArgs);
+            if(!$obj::$allowExternalAPI){
+                Json::dieWithReason('외부에서는 호출할 수 없습니다.');
+            }
             $validateResult = $obj->validateArgs();
             if ($validateResult !== null) {
                 $logDB->insert('api_log', [
diff --git a/src/sammo/BaseAPI.php b/src/sammo/BaseAPI.php
index a605d686..f33d080e 100644
--- a/src/sammo/BaseAPI.php
+++ b/src/sammo/BaseAPI.php
@@ -11,6 +11,7 @@ abstract class BaseAPI
     const REQ_READ_ONLY = 4;
 
     static array $sensitiveArgs = [];
+    static bool $allowExternalAPI = true;
 
     public function getFilteredArgs(): array {
         $filteredArgs = $this->args;