gitea/routers/api/v1/repo
Lunny Xiao 62d750eadb
Fix various permission & login related bugs (#36002)
Permission & protection check:

- Fix Delete Release permission check
- Fix Update Pull Request with rebase branch protection check
- Fix Issue Dependency permission check
- Fix Delete Comment History ID check

Information leaking:

- Show unified message for non-existing user and invalid password
    - Fix #35984
- Don't expose release draft to non-writer users.
- Make API returns signature's email address instead of the user
profile's.

Auth & Login:

- Avoid GCM OAuth2 attempt when OAuth2 is disabled
    - Fix #35510

---------

Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
2025-11-22 07:16:08 +07:00
..
action.go Fix Actions API (#35204) 2025-08-04 23:41:30 +07:00
actions_run.go Add `owner` and `parent` fields clarification to docs (#35023) 2025-07-23 06:44:34 +07:00
avatar.go Refactor error system (#33626) 2025-02-17 12:41:03 +07:00
blob.go Refactor repo contents API and add "contents-ext" API (#34822) 2025-06-25 02:34:21 +07:00
branch.go Use correct form field for allowed force push users in branch protection API (#35894) 2025-11-09 21:23:46 +07:00
collaborators.go Enable gocritic `equalFold` and fix issues (#34952) 2025-07-06 16:53:34 +07:00
commits.go feat(api): add date range filtering to commit retrieval endpoints (#34497) 2025-05-19 18:57:58 +07:00
compare.go Refactor error system (#33626) 2025-02-17 12:41:03 +07:00
download.go Move archive function to repo_model and gitrepo (#35514) 2025-10-06 15:01:26 +07:00
file.go fix(api/repo/contents): set the dates to now when not specified by the caller (#35861) 2025-11-05 18:52:24 +07:00
fork.go Refactor error system (#33626) 2025-02-17 12:41:03 +07:00
git_hook.go Refactor error system (#33626) 2025-02-17 12:41:03 +07:00
git_ref.go Refactor error system (#33626) 2025-02-17 12:41:03 +07:00
hook.go Refactor error system (#33626) 2025-02-17 12:41:03 +07:00
hook_test.go Enable testifylint rules (#34075) 2025-03-31 01:53:48 +07:00
issue.go Update issue.go with labels documentation (labels content, not ids) (#35522) 2025-09-25 16:56:49 +07:00
issue_attachment.go fix attachment file size limit in server backend (#35519) 2025-10-21 15:07:11 +07:00
issue_comment.go Allow deleting comment with content via API like web did (#35346) 2025-08-25 10:43:11 +07:00
issue_comment_attachment.go fix attachment file size limit in server backend (#35519) 2025-10-21 15:07:11 +07:00
issue_dependency.go Fix various permission & login related bugs (#36002) 2025-11-22 07:16:08 +07:00
issue_label.go Enable addtional linters (#34085) 2025-04-01 10:14:01 +07:00
issue_lock.go Add API routes to lock and unlock issues (#34165) 2025-04-21 00:43:43 +07:00
issue_pin.go Address some CodeQL security concerns (#35572) 2025-10-04 01:21:26 +07:00
issue_reaction.go Refactor error system (#33626) 2025-02-17 12:41:03 +07:00
issue_stopwatch.go fix(issue): Replace stopwatch toggle with explicit start/stop actions (#34818) 2025-06-25 07:22:58 +07:00
issue_subscription.go Add a `login`/`login-name`/`username` disambiguation to affected endpoint parameters and response/request models (#34901) 2025-06-29 21:17:45 +07:00
issue_tracked_time.go Add a `login`/`login-name`/`username` disambiguation to affected endpoint parameters and response/request models (#34901) 2025-06-29 21:17:45 +07:00
key.go Refactor error system (#33626) 2025-02-17 12:41:03 +07:00
label.go Refactor error system (#33626) 2025-02-17 12:41:03 +07:00
language.go Refactor error system (#33610) 2025-02-16 22:13:17 +07:00
license.go Refactor error system (#33610) 2025-02-16 22:13:17 +07:00
main_test.go make writing main test easier (#27270) 2023-09-28 01:38:53 +07:00
migrate.go Fix various bugs (#35684) 2025-10-19 00:37:50 +07:00
milestone.go Refactor error system (#33626) 2025-02-17 12:41:03 +07:00
mirror.go Enable addtional linters (#34085) 2025-04-01 10:14:01 +07:00
notes.go Improve "not found" error messages for API (#34267) 2025-04-23 17:42:50 +07:00
patch.go Fix diffpatch API endpoint (#35610) 2025-10-10 00:39:14 +07:00
pull.go Remove unnecessary function parameter (#35765) 2025-10-31 21:56:08 +07:00
pull_review.go Rename pull request GetGitRefName to GetGitHeadRefName (#35093) 2025-07-16 21:33:33 +07:00
release.go Support annotated tags when using create release API (#31840) 2025-06-18 05:12:38 +07:00
release_attachment.go fix attachment file size limit in server backend (#35519) 2025-10-21 15:07:11 +07:00
release_tags.go Fix various permission & login related bugs (#36002) 2025-11-22 07:16:08 +07:00
repo.go Refactor Actions Token Access (#35688) 2025-10-22 11:12:31 +07:00
repo_test.go Enable testifylint rules (#34075) 2025-03-31 01:53:48 +07:00
star.go Refactor error system (#33626) 2025-02-17 12:41:03 +07:00
status.go Always return the relevant status information, even if no status exists. (#35335) 2025-08-23 18:48:44 +07:00
subscriber.go Refactor error system (#33626) 2025-02-17 12:41:03 +07:00
tag.go Improve "not found" error messages for API (#34267) 2025-04-23 17:42:50 +07:00
teams.go Refactor error system (#33610) 2025-02-16 22:13:17 +07:00
topic.go Refactor error system (#33610) 2025-02-16 22:13:17 +07:00
transfer.go Fix return bug (#34093) 2025-04-01 17:36:46 +07:00
tree.go Refactor error system (#33610) 2025-02-16 22:13:17 +07:00
wiki.go Refactor repo contents API and add "contents-ext" API (#34822) 2025-06-25 02:34:21 +07:00