Merge pull request 'Disabling Stars should disable the routes too' (#2471) from algernon/forgejo:stars/disable-routes into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/2471 Reviewed-by: Otto <otto@codeberg.org> Reviewed-by: Gusted <gusted@noreply.codeberg.org>
This commit is contained in:
commit
2855727c85
6 changed files with 96 additions and 15 deletions
|
@ -964,7 +964,9 @@ func Routes() *web.Route {
|
|||
m.Get("/{target}", user.CheckFollowing)
|
||||
})
|
||||
|
||||
m.Get("/starred", user.GetStarredRepos)
|
||||
if !setting.Repository.DisableStars {
|
||||
m.Get("/starred", user.GetStarredRepos)
|
||||
}
|
||||
|
||||
m.Get("/subscriptions", user.GetWatchedRepos)
|
||||
}, context_service.UserAssignmentAPI())
|
||||
|
@ -1039,14 +1041,16 @@ func Routes() *web.Route {
|
|||
Post(bind(api.CreateRepoOption{}), repo.Create)
|
||||
|
||||
// (repo scope)
|
||||
m.Group("/starred", func() {
|
||||
m.Get("", user.GetMyStarredRepos)
|
||||
m.Group("/{username}/{reponame}", func() {
|
||||
m.Get("", user.IsStarring)
|
||||
m.Put("", user.Star)
|
||||
m.Delete("", user.Unstar)
|
||||
}, repoAssignment())
|
||||
}, tokenRequiresScopes(auth_model.AccessTokenScopeCategoryRepository))
|
||||
if !setting.Repository.DisableStars {
|
||||
m.Group("/starred", func() {
|
||||
m.Get("", user.GetMyStarredRepos)
|
||||
m.Group("/{username}/{reponame}", func() {
|
||||
m.Get("", user.IsStarring)
|
||||
m.Put("", user.Star)
|
||||
m.Delete("", user.Unstar)
|
||||
}, repoAssignment())
|
||||
}, tokenRequiresScopes(auth_model.AccessTokenScopeCategoryRepository))
|
||||
}
|
||||
m.Get("/times", repo.ListMyTrackedTimes)
|
||||
m.Get("/stopwatches", repo.GetStopwatches)
|
||||
m.Get("/subscriptions", user.GetMyWatchedRepos)
|
||||
|
@ -1208,7 +1212,9 @@ func Routes() *web.Route {
|
|||
m.Post("/markup", reqToken(), bind(api.MarkupOption{}), misc.Markup)
|
||||
m.Post("/markdown", reqToken(), bind(api.MarkdownOption{}), misc.Markdown)
|
||||
m.Post("/markdown/raw", reqToken(), misc.MarkdownRaw)
|
||||
m.Get("/stargazers", repo.ListStargazers)
|
||||
if !setting.Repository.DisableStars {
|
||||
m.Get("/stargazers", repo.ListStargazers)
|
||||
}
|
||||
m.Get("/subscribers", repo.ListSubscribers)
|
||||
m.Group("/subscription", func() {
|
||||
m.Get("", user.IsWatching)
|
||||
|
|
|
@ -1129,8 +1129,10 @@ func registerRoutes(m *web.Route) {
|
|||
m.Post("/unwatch", repo.ActionWatch(false))
|
||||
m.Post("/accept_transfer", repo.ActionTransfer(true))
|
||||
m.Post("/reject_transfer", repo.ActionTransfer(false))
|
||||
m.Post("/star", repo.ActionStar(true))
|
||||
m.Post("/unstar", repo.ActionStar(false))
|
||||
if !setting.Repository.DisableStars {
|
||||
m.Post("/star", repo.ActionStar(true))
|
||||
m.Post("/unstar", repo.ActionStar(false))
|
||||
}
|
||||
}, reqSignIn, context.RepoAssignment, context.UnitTypes())
|
||||
|
||||
// Grouping for those endpoints not requiring authentication (but should respect ignSignIn)
|
||||
|
@ -1359,7 +1361,9 @@ func registerRoutes(m *web.Route) {
|
|||
m.Get("/open.svg", badges.GetOpenPullsBadge)
|
||||
m.Get("/closed.svg", badges.GetClosedPullsBadge)
|
||||
})
|
||||
m.Get("/stars.svg", badges.GetStarsBadge)
|
||||
if !setting.Repository.DisableStars {
|
||||
m.Get("/stars.svg", badges.GetStarsBadge)
|
||||
}
|
||||
m.Get("/release.svg", badges.GetLatestReleaseBadge)
|
||||
})
|
||||
}
|
||||
|
@ -1590,7 +1594,9 @@ func registerRoutes(m *web.Route) {
|
|||
m.Post("/{username}/{reponame}/lastcommit/*", ignSignInAndCsrf, context.RepoAssignment, context.UnitTypes(), context.RepoRefByType(context.RepoRefCommit), reqRepoCodeReader, repo.LastCommit)
|
||||
|
||||
m.Group("/{username}/{reponame}", func() {
|
||||
m.Get("/stars", repo.Stars)
|
||||
if !setting.Repository.DisableStars {
|
||||
m.Get("/stars", repo.Stars)
|
||||
}
|
||||
m.Get("/watchers", repo.Watchers)
|
||||
m.Get("/search", reqRepoCodeReader, repo.Search)
|
||||
}, ignSignIn, context.RepoAssignment, context.RepoRef(), context.UnitTypes())
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue