From cb33623bb6b0cf60417c4a1d84b8f42ef1714ea3 Mon Sep 17 00:00:00 2001 From: Giteabot Date: Fri, 12 Jan 2024 14:51:27 +0800 Subject: [PATCH] Require token for GET subscription endpoint (#28765) (#28768) Backport #28765 by @jackHay22 Fixes #28756 ## Changes - Require and check API token for `GET /repos/{owner}/{repo}/subscription` in order to populate `ctx.Doer`. Co-authored-by: Jack Hay --- routers/api/v1/api.go | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/routers/api/v1/api.go b/routers/api/v1/api.go index 09fde1e05b..8dba0a7908 100644 --- a/routers/api/v1/api.go +++ b/routers/api/v1/api.go @@ -1143,9 +1143,9 @@ func Routes() *web.Route { m.Get("/subscribers", repo.ListSubscribers) m.Group("/subscription", func() { m.Get("", user.IsWatching) - m.Put("", reqToken(), user.Watch) - m.Delete("", reqToken(), user.Unwatch) - }) + m.Put("", user.Watch) + m.Delete("", user.Unwatch) + }, reqToken()) m.Group("/releases", func() { m.Combo("").Get(repo.ListReleases). Post(reqToken(), reqRepoWriter(unit.TypeReleases), context.ReferencesGitRepo(), bind(api.CreateReleaseOption{}), repo.CreateRelease)