Lunny Xiao 62d750eadb Fix various permission & login related bugs (#36002) ...

Permission & protection check:

- Fix Delete Release permission check
- Fix Update Pull Request with rebase branch protection check
- Fix Issue Dependency permission check
- Fix Delete Comment History ID check

Information leaking:

- Show unified message for non-existing user and invalid password
    - Fix #35984
- Don't expose release draft to non-writer users.
- Make API returns signature's email address instead of the user
profile's.

Auth & Login:

- Avoid GCM OAuth2 attempt when OAuth2 is disabled
    - Fix #35510

---------

Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

2025-11-22 07:16:08 +00:00

..

action.go

Fix Actions API (#35204)

2025-08-04 23:41:30 -04:00

actions_run.go

Add owner and parent fields clarification to docs (#35023)

2025-07-23 06:44:34 +00:00

avatar.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

blob.go

Refactor repo contents API and add "contents-ext" API (#34822)

2025-06-25 02:34:21 +00:00

branch.go

Use correct form field for allowed force push users in branch protection API (#35894)

2025-11-09 21:23:46 +00:00

collaborators.go

Enable gocritic equalFold and fix issues (#34952)

2025-07-06 16:53:34 +00:00

commits.go

feat(api): add date range filtering to commit retrieval endpoints (#34497)

2025-05-19 18:57:58 -07:00

compare.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

download.go

Move archive function to repo_model and gitrepo (#35514)

2025-10-06 15:01:26 -07:00

file.go

fix(api/repo/contents): set the dates to now when not specified by the caller (#35861)

2025-11-05 18:52:24 +00:00

fork.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

git_hook.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

git_ref.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

hook_test.go

Enable testifylint rules (#34075)

2025-03-31 01:53:48 -04:00

hook.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

issue_attachment.go

fix attachment file size limit in server backend (#35519)

2025-10-21 15:07:11 +00:00

issue_comment_attachment.go

fix attachment file size limit in server backend (#35519)

2025-10-21 15:07:11 +00:00

issue_comment.go

Allow deleting comment with content via API like web did (#35346)

2025-08-25 10:43:11 +00:00

issue_dependency.go

Fix various permission & login related bugs (#36002)

2025-11-22 07:16:08 +00:00

issue_label.go

Enable addtional linters (#34085)

2025-04-01 10:14:01 +00:00

issue_lock.go

Add API routes to lock and unlock issues (#34165)

2025-04-21 00:43:43 +00:00

issue_pin.go

Address some CodeQL security concerns (#35572)

2025-10-04 01:21:26 +08:00

issue_reaction.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

issue_stopwatch.go

fix(issue): Replace stopwatch toggle with explicit start/stop actions (#34818)

2025-06-25 07:22:58 +08:00

issue_subscription.go

Add a login/login-name/username disambiguation to affected endpoint parameters and response/request models (#34901)

2025-06-29 21:17:45 -07:00

issue_tracked_time.go

Add a login/login-name/username disambiguation to affected endpoint parameters and response/request models (#34901)

2025-06-29 21:17:45 -07:00

issue.go

Update issue.go with labels documentation (labels content, not ids) (#35522)

2025-09-25 16:56:49 +00:00

key.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

label.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

language.go

Refactor error system (#33610)

2025-02-16 22:13:17 -08:00

license.go

Refactor error system (#33610)

2025-02-16 22:13:17 -08:00

main_test.go

make writing main test easier (#27270)

2023-09-28 01:38:53 +00:00

migrate.go

Fix various bugs (#35684)

2025-10-19 00:37:50 +08:00

milestone.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

mirror.go

Enable addtional linters (#34085)

2025-04-01 10:14:01 +00:00

notes.go

Improve "not found" error messages for API (#34267)

2025-04-23 17:42:50 +08:00

patch.go

Fix diffpatch API endpoint (#35610)

2025-10-10 00:39:14 +08:00

pull_review.go

Rename pull request GetGitRefName to GetGitHeadRefName (#35093)

2025-07-16 21:33:33 +08:00

pull.go

Remove unnecessary function parameter (#35765)

2025-10-31 21:56:08 -07:00

release_attachment.go

fix attachment file size limit in server backend (#35519)

2025-10-21 15:07:11 +00:00

release_tags.go

Fix various permission & login related bugs (#36002)

2025-11-22 07:16:08 +00:00

release.go

Support annotated tags when using create release API (#31840)

2025-06-18 05:12:38 +00:00

repo_test.go

Enable testifylint rules (#34075)

2025-03-31 01:53:48 -04:00

repo.go

Refactor Actions Token Access (#35688)

2025-10-22 11:12:31 +00:00

star.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

status.go

Always return the relevant status information, even if no status exists. (#35335)

2025-08-23 18:48:44 +00:00

subscriber.go

Refactor error system (#33626)

2025-02-17 12:41:03 -08:00

tag.go

Improve "not found" error messages for API (#34267)

2025-04-23 17:42:50 +08:00

teams.go

Refactor error system (#33610)

2025-02-16 22:13:17 -08:00

topic.go

Refactor error system (#33610)

2025-02-16 22:13:17 -08:00

transfer.go

Fix return bug (#34093)

2025-04-01 17:36:46 -04:00

tree.go

Refactor error system (#33610)

2025-02-16 22:13:17 -08:00

wiki.go

Refactor repo contents API and add "contents-ext" API (#34822)

2025-06-25 02:34:21 +00:00