Lunny Xiao 20cf4b7849

Fix various permission & login related bugs (#36002) (#36004) ...

Backport #36002 

Permission & protection check:

- Fix Delete Release permission check
- Fix Update Pull Request with rebase branch protection check
- Fix Issue Dependency permission check
- Fix Delete Comment History ID check

Information leaking:

- Show unified message for non-existing user and invalid password
    - Fix #35984
- Don't expose release draft to non-writer users.
- Make API returns signature's email address instead of the user
profile's.

Auth & Login:

- Avoid GCM OAuth2 attempt when OAuth2 is disabled
    - Fix #35510

---------

Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

2025-11-22 12:33:48 +00:00

..

action.go

Fix Actions API (#35204)

2025-08-04 23:41:30 -04:00

actions_run.go

Add owner and parent fields clarification to docs (#35023)

2025-07-23 06:44:34 +00:00

avatar.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

blob.go

Refactor repo contents API and add "contents-ext" API (#34822)

2025-06-25 02:34:21 +00:00

branch.go

Use correct form field for allowed force push users in branch protection API (#35894) (#35908)

2025-11-11 01:39:35 +00:00

collaborators.go

Enable gocritic equalFold and fix issues (#34952)

2025-07-06 16:53:34 +00:00

commits.go

feat(api): add date range filtering to commit retrieval endpoints (#34497)

2025-05-19 18:57:58 -07:00

compare.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

download.go

Stream repo zip/tar.gz/bundle achives by default (#35487)

2025-09-19 11:51:21 +08:00

file.go

fix(api/repo/contents): set the dates to now when not specified by the caller (#35861) (#35874)

2025-11-06 13:08:06 +08:00

fork.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

git_hook.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

git_ref.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

hook_test.go

Enable testifylint rules (#34075)

2025-03-31 01:53:48 -04:00

hook.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

issue_attachment.go

fix attachment file size limit in server backend (#35519) (#35720)

2025-10-21 18:01:59 +00:00

issue_comment_attachment.go

fix attachment file size limit in server backend (#35519) (#35720)

2025-10-21 18:01:59 +00:00

issue_comment.go

Allow deleting comment with content via API like web did (#35346)

2025-08-25 10:43:11 +00:00

issue_dependency.go

Fix various permission & login related bugs (#36002) (#36004)

2025-11-22 12:33:48 +00:00

issue_label.go

Enable addtional linters (#34085)

2025-04-01 10:14:01 +00:00

issue_lock.go

Add API routes to lock and unlock issues (#34165)

2025-04-21 00:43:43 +00:00

issue_pin.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

issue_reaction.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

issue_stopwatch.go

fix(issue): Replace stopwatch toggle with explicit start/stop actions (#34818)

2025-06-25 07:22:58 +08:00

issue_subscription.go

Add a login/login-name/username disambiguation to affected endpoint parameters and response/request models (#34901)

2025-06-29 21:17:45 -07:00

issue_tracked_time.go

Add a login/login-name/username disambiguation to affected endpoint parameters and response/request models (#34901)

2025-06-29 21:17:45 -07:00

issue.go

Move updateref and removeref to gitrepo and remove unnecessary open repository (#35511)

2025-09-19 08:04:18 -07:00

key.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

label.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

language.go

Refactor error system (#33610)

2025-02-16 22:13:17 -08:00

license.go

Refactor error system (#33610)

2025-02-16 22:13:17 -08:00

main_test.go

make writing main test easier (#27270)

2023-09-28 01:38:53 +00:00

migrate.go

Fix various bugs (#35684) (#35696)

2025-10-19 02:26:03 +08:00

milestone.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

mirror.go

Enable addtional linters (#34085)

2025-04-01 10:14:01 +00:00

notes.go

Improve "not found" error messages for API (#34267)

2025-04-23 17:42:50 +08:00

patch.go

Fix diffpatch API endpoint (#35610) (#35613)

2025-10-10 03:28:40 +00:00

pull_review.go

Rename pull request GetGitRefName to GetGitHeadRefName (#35093)

2025-07-16 21:33:33 +08:00

pull.go

Honor delete branch on merge repo setting when using merge API (#35488) (#35726)

2025-10-22 09:41:40 -07:00

release_attachment.go

fix attachment file size limit in server backend (#35519) (#35720)

2025-10-21 18:01:59 +00:00

release_tags.go

Fix various permission & login related bugs (#36002) (#36004)

2025-11-22 12:33:48 +00:00

release.go

Support annotated tags when using create release API (#31840)

2025-06-18 05:12:38 +00:00

repo_test.go

Enable testifylint rules (#34075)

2025-03-31 01:53:48 -04:00

repo.go

Use gitrepo.SetDefaultBranch when set default branch of wiki repository (#33911)

2025-08-28 06:06:39 +00:00

star.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

status.go

Always return the relevant status information, even if no status exists. (#35335)

2025-08-23 18:48:44 +00:00

subscriber.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

tag.go

Improve "not found" error messages for API (#34267)

2025-04-23 17:42:50 +08:00

teams.go

Refactor error system (#33610)

2025-02-16 22:13:17 -08:00

topic.go

Refactor error system (#33610)

2025-02-16 22:13:17 -08:00

transfer.go

Fix return bug (#34093)

2025-04-01 17:36:46 -04:00

tree.go

Refactor error system (#33610)

2025-02-16 22:13:17 -08:00

wiki.go

Refactor repo contents API and add "contents-ext" API (#34822)

2025-06-25 02:34:21 +00:00