From c0a528eb10cf2fadd00313fa0ff4433cde2b0785 Mon Sep 17 00:00:00 2001
From: Jyri-Petteri Paloposki <jyri-petteri.paloposki@iki.fi>
Date: Fri, 9 Jan 2026 11:59:14 +0200
Subject: [PATCH] Style fixes after Superfish update in !3125. Allow access to
 the todo create call also with token.

---
 app/assets/stylesheets/include/legacy.scss | 22 ++++++++++++++++++++++
 app/controllers/todos_controller.rb        |  4 ++--
 2 files changed, 24 insertions(+), 2 deletions(-)

diff --git a/app/assets/stylesheets/include/legacy.scss b/app/assets/stylesheets/include/legacy.scss
index bfc3052c..7d1d1101 100644
--- a/app/assets/stylesheets/include/legacy.scss
+++ b/app/assets/stylesheets/include/legacy.scss
@@ -1388,3 +1388,25 @@ ul.todo-submenu > li > a {
 .recurring_todos .ui-dialog .ui-dialog-title {
   float: inherit;
 }
+
+.sf-menu {
+  margin-bottom: 0;
+}
+
+.sf-menu a {
+  padding-top: 0 !important;
+  padding-bottom: 0 !important;
+}
+
+.sf-menu li {
+  background: none !important;
+}
+
+.sf-menu ul.todo-submenu {
+  background: white;
+  padding: 0.25em;
+}
+
+.sf-menu ul.todo-submenu li > a {
+  padding-left: 24px;
+}
diff --git a/app/controllers/todos_controller.rb b/app/controllers/todos_controller.rb
index 05b7a95a..ce535d6b 100644
--- a/app/controllers/todos_controller.rb
+++ b/app/controllers/todos_controller.rb
@@ -1,6 +1,6 @@
 class TodosController < ApplicationController
-  skip_before_action :login_required, :only => [:index, :tag, :list_deferred, :show, :list_hidden, :done]
-  prepend_before_action :login_or_feed_token_required, :only => [:index, :tag, :list_deferred, :show, :list_hidden, :done]
+  skip_before_action :login_required, :only => [:index, :create, :tag, :list_deferred, :show, :list_hidden, :done]
+  prepend_before_action :login_or_feed_token_required, :only => [:index, :create, :tag, :list_deferred, :show, :list_hidden, :done]
   append_before_action :find_and_activate_ready, :only => [:index, :list_deferred]
 
   protect_from_forgery :except => :check_deferred