From 6a66e8c7486b0be873dfc55dfdef9ba056970a90 Mon Sep 17 00:00:00 2001 From: Giteabot Date: Fri, 12 Jan 2024 14:51:27 +0800 Subject: [PATCH] Require token for GET subscription endpoint (#28765) (#28768) Backport #28765 by @jackHay22 Fixes #28756 ## Changes - Require and check API token for `GET /repos/{owner}/{repo}/subscription` in order to populate `ctx.Doer`. Co-authored-by: Jack Hay (cherry picked from commit cb33623bb6b0cf60417c4a1d84b8f42ef1714ea3) --- routers/api/v1/api.go | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/routers/api/v1/api.go b/routers/api/v1/api.go index f613fdefa1..12dc4d8eb8 100644 --- a/routers/api/v1/api.go +++ b/routers/api/v1/api.go @@ -1140,9 +1140,9 @@ func Routes() *web.Route { m.Get("/subscribers", repo.ListSubscribers) m.Group("/subscription", func() { m.Get("", user.IsWatching) - m.Put("", reqToken(), user.Watch) - m.Delete("", reqToken(), user.Unwatch) - }) + m.Put("", user.Watch) + m.Delete("", user.Unwatch) + }, reqToken()) m.Group("/releases", func() { m.Combo("").Get(repo.ListReleases). Post(reqToken(), reqRepoWriter(unit.TypeReleases), context.ReferencesGitRepo(), bind(api.CreateReleaseOption{}), repo.CreateRelease)