mirror of
				https://github.com/go-gitea/gitea
				synced 2025-10-31 11:28:24 +00:00 
			
		
		
		
	Backport #27486 by @lunny Fix #27204 This PR allows `/<username>/<reponame>/attachments/<uuid>` access with personal access token and also changed attachments API download url to it so it can be download correctly. Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
This commit is contained in:
		| @@ -117,7 +117,7 @@ func (r *ReverseProxy) Verify(req *http.Request, w http.ResponseWriter, store Da | ||||
| 	} | ||||
|  | ||||
| 	// Make sure requests to API paths, attachment downloads, git and LFS do not create a new session | ||||
| 	if !middleware.IsAPIPath(req) && !isAttachmentDownload(req) && !isGitRawReleaseOrLFSPath(req) { | ||||
| 	if !middleware.IsAPIPath(req) && !isAttachmentDownload(req) && !isGitRawOrAttachOrLFSPath(req) { | ||||
| 		if sess != nil && (sess.Get("uid") == nil || sess.Get("uid").(int64) != user.ID) { | ||||
| 			handleSignIn(w, req, sess, user) | ||||
| 		} | ||||
|   | ||||
		Reference in New Issue
	
	Block a user