Lunny Xiao 20cf4b7849 Fix various permission & login related bugs (#36002) (#36004) ...

Backport #36002 

Permission & protection check:

- Fix Delete Release permission check
- Fix Update Pull Request with rebase branch protection check
- Fix Issue Dependency permission check
- Fix Delete Comment History ID check

Information leaking:

- Show unified message for non-existing user and invalid password
    - Fix #35984
- Don't expose release draft to non-writer users.
- Make API returns signature's email address instead of the user
profile's.

Auth & Login:

- Avoid GCM OAuth2 attempt when OAuth2 is disabled
    - Fix #35510

---------

Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

2025-11-22 12:33:48 +00:00

..

activity.go

For API attachments, use API URL (#25639)

2023-07-10 09:31:19 +00:00

attachment.go

Fix attachment download bug (#27486)

2023-10-10 15:33:56 +00:00

convert.go

Fix various permission & login related bugs (#36002) (#36004)

2025-11-22 12:33:48 +00:00

git_commit_test.go

Enable testifylint rules (#34075)

2025-03-31 01:53:48 -04:00

git_commit.go

Decouple diff stats query from actual diffing (#33810)

2025-03-08 17:36:08 +08:00

issue_comment.go

Make tracked time representation display as hours (#33315)

2025-01-19 09:30:44 +08:00

issue_test.go

Move convert package to services (#22264)

2022-12-29 10:57:15 +08:00

issue.go

Exposing TimeEstimate field in the API (#35475)

2025-09-16 04:32:03 +00:00

main_test.go

make writing main test easier (#27270)

2023-09-28 01:38:53 +00:00

mirror.go

Even more db.DefaultContext refactor (#27352)

2023-10-03 10:30:41 +00:00

notification.go

Fix context usages (#35348)

2025-08-27 11:00:01 +00:00

package.go

Fix context usages (#35348)

2025-08-27 11:00:01 +00:00

pull_review_test.go

Remove incorrect "db.DefaultContext" usages (#35366)

2025-08-28 03:52:43 +00:00

pull_review.go

Fix context usages (#35348)

2025-08-27 11:00:01 +00:00

pull_test.go

Remove incorrect "db.DefaultContext" usages (#35366)

2025-08-28 03:52:43 +00:00

pull.go

Fix context usages (#35348)

2025-08-27 11:00:01 +00:00

release_test.go

Remove incorrect "db.DefaultContext" usages (#35366)

2025-08-28 03:52:43 +00:00

release.go

add Upload URL to release API (#26663)

2023-08-24 10:36:10 +00:00

repository.go

Fix ListWorkflowRuns OpenAPI response model. (#35026)

2025-07-10 05:58:07 +00:00

secret.go

feat: implement organization secret creation API (#26566)

2023-08-22 11:20:34 +08:00

status.go

Always return the relevant status information, even if no status exists. (#35335)

2025-08-23 18:48:44 +00:00

user_test.go

Remove incorrect "db.DefaultContext" usages (#35366)

2025-08-28 03:52:43 +00:00

user.go

Fix context usages (#35348)

2025-08-27 11:00:01 +00:00

utils_test.go

Enable testifylint rules (#34075)

2025-03-31 01:53:48 -04:00

utils.go

Fix typo in gitea downloader test and add missing codebase in ToGitServiceType (#33146)

2025-01-08 18:34:53 +00:00

wiki.go

Fix an actions schedule bug (#28942)

2024-01-31 14:55:12 +00:00