silverwind and wxiaoguang
5264304a34
refactor: carry the API token on the doer ( #39690 )
...
The token a request authenticated with now lives on the doer, so
permission and visibility checks apply its scope from the doer alone.
Replaces https://github.com/go-gitea/gitea/pull/39167 , following
https://github.com/go-gitea/gitea/pull/39167#issuecomment-6063839619 .
1. Public-only tokens get 404 instead of 403 for hidden users, orgs and
repos, like GitHub.
2. Org ownership, site admin, repo and org creation, generation and
transfer endpoints reject public-only tokens.
3. API pull request responses set `head.repo` to `null` and
`head.repo_id` to `-1` when the caller cannot see the head repository.
4. Public-only tokens see org memberships like anonymous callers, so
concealed members stay hidden.
5. Site admin access in activity feeds, follower lists, org members,
Actions run lists and packages needs a session or an `all`-scoped token.
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com >
2026-10-19 00:34:01 +00:00
..
2026-04-23 15:18:53 +00:00
2026-10-18 12:56:04 +00:00
2026-09-26 22:52:19 +00:00
2026-09-26 07:42:36 +00:00
2026-10-18 12:56:04 +00:00
2026-10-03 15:25:47 +08:00
2026-08-07 20:56:40 -07:00
2026-10-18 12:56:04 +00:00
2026-05-26 15:49:31 -07:00
2026-09-30 21:42:07 -06:00
2026-09-26 08:01:41 +00:00
2026-10-18 12:56:04 +00:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-08-07 20:56:40 -07:00
2026-08-07 20:56:40 -07:00
2026-10-18 07:08:55 +00:00
2026-09-27 18:30:42 +00:00
2026-09-30 21:42:07 -06:00
2026-08-07 20:56:40 -07:00
2026-07-15 02:36:03 +00:00
2026-07-25 21:31:19 +00:00
2026-10-18 12:56:04 +00:00
2026-10-14 19:34:46 +00:00
2026-08-07 20:56:40 -07:00
2026-05-26 15:49:31 -07:00
2026-10-18 07:08:55 +00:00
2026-10-10 18:21:28 +00:00
2026-09-18 12:43:36 +00:00
2026-06-27 12:09:01 +00:00
2026-08-29 07:50:04 +00:00
2026-10-03 17:22:07 +00:00
2026-10-10 19:52:23 +00:00
2026-10-10 19:52:23 +00:00
2026-05-26 15:49:31 -07:00
2026-10-10 19:52:23 +00:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-08-22 09:29:25 +02:00
2026-09-16 17:34:41 +00:00
2026-05-26 15:49:31 -07:00
2026-10-14 07:19:49 +00:00
2026-08-31 23:31:17 +00:00
2026-05-26 15:49:31 -07:00
2026-06-10 17:34:10 +00:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-09-06 09:49:27 +00:00
2026-08-09 10:25:06 +00:00
2026-09-30 20:25:14 +02:00
2026-08-17 20:30:24 +00:00
2026-07-25 20:39:36 +08:00
2026-07-12 17:14:09 +00:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-08-17 20:30:24 +00:00
2026-10-18 06:29:49 -07:00
2026-07-12 17:14:09 +00:00
2026-08-26 19:32:44 +00:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-06-17 06:39:22 +00:00
2026-08-23 07:23:16 +00:00
2026-07-16 11:51:36 +02:00
2026-05-26 15:49:31 -07:00
2026-07-28 17:04:22 +00:00
2026-05-26 15:49:31 -07:00
2026-08-24 07:28:17 +00:00
2026-08-09 10:25:06 +00:00
2026-05-26 15:49:31 -07:00
2026-09-23 18:45:56 +00:00
2026-10-17 06:48:48 +00:00
2026-08-17 17:43:34 +00:00
2026-10-19 00:34:01 +00:00
2026-05-26 15:49:31 -07:00
2026-08-09 12:55:43 +00:00
2026-08-09 10:25:06 +00:00
2026-10-01 07:50:47 +00:00
2026-08-24 07:28:17 +00:00
2026-08-07 11:49:23 +00:00
2026-08-09 10:25:06 +00:00
2026-10-17 06:10:04 +00:00
2026-08-24 07:28:17 +00:00
2026-08-28 05:15:55 +00:00
2026-08-24 18:26:10 +00:00
2026-08-17 20:30:24 +00:00
2026-08-24 07:28:17 +00:00
2026-08-26 19:32:44 +00:00
2026-10-19 00:34:01 +00:00
2026-10-19 00:34:01 +00:00
2026-05-26 15:49:31 -07:00
2026-09-26 16:51:55 +00:00
2026-10-19 00:34:01 +00:00
2026-05-26 15:49:31 -07:00
2026-08-24 07:28:17 +00:00
2026-05-26 15:49:31 -07:00
2026-06-17 06:39:22 +00:00
2026-06-03 16:21:48 -07:00
2026-05-26 15:49:31 -07:00
2026-08-21 07:06:56 +00:00
2026-08-26 20:12:53 +08:00
2026-09-29 14:43:36 +02:00
2026-08-03 06:41:27 +00:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-09-30 20:25:14 +02:00
2026-05-26 15:49:31 -07:00
2026-08-03 06:41:27 +00:00
2026-08-20 15:57:17 +00:00
2026-07-28 17:04:22 +00:00
2026-08-03 06:41:27 +00:00
2026-08-03 06:41:27 +00:00
2026-05-26 15:49:31 -07:00
2026-08-05 17:19:31 +00:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-10-03 10:04:24 +00:00
2026-05-26 15:49:31 -07:00
2026-07-12 17:14:09 +00:00
2026-10-18 12:56:04 +00:00
2026-05-26 15:49:31 -07:00
2026-09-29 14:43:36 +02:00
2026-07-31 11:05:41 +00:00
2026-10-18 12:56:04 +00:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-08-23 06:35:55 +00:00
2026-10-09 12:11:47 +00:00
2026-09-08 09:28:57 +00:00
2026-05-26 15:49:31 -07:00
2026-08-21 07:28:23 +00:00
2026-05-26 15:49:31 -07:00
2026-10-05 09:03:34 +00:00
2026-05-26 15:49:31 -07:00
2026-06-14 20:05:18 +02:00
2026-07-12 17:14:09 +00:00
2026-06-17 16:06:51 +00:00
2026-06-17 06:39:22 +00:00
2026-05-26 15:49:31 -07:00
2026-09-16 17:34:41 +00:00
2026-05-26 15:49:31 -07:00
2026-10-19 00:34:01 +00:00
2026-05-26 15:49:31 -07:00
2026-06-08 16:58:42 +08:00
2026-08-22 23:11:04 -07:00
2026-10-19 00:34:01 +00:00
2026-07-16 17:38:33 +00:00
2026-05-26 15:49:31 -07:00
2026-07-10 19:30:43 +02:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-08-22 08:08:36 +00:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-10-19 00:34:01 +00:00
2026-08-14 02:15:33 +00:00
2026-08-09 10:25:06 +00:00
2023-06-29 23:22:55 +00:00
2026-10-14 07:19:49 +00:00
2026-07-20 16:07:38 +00:00
2026-06-29 15:10:47 +00:00
2026-07-28 17:04:22 +00:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-10-02 21:08:14 +02:00
2026-05-26 15:49:31 -07:00
2026-06-18 12:02:11 +00:00
2026-10-04 16:26:14 +08:00
2026-10-19 00:34:01 +00:00
2026-09-29 14:43:36 +02:00
2026-09-05 10:01:27 +00:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-06-17 06:50:25 +02:00
2026-07-12 17:14:09 +00:00
2026-10-18 12:56:04 +00:00
2026-10-05 05:25:54 +00:00
2026-05-26 15:49:31 -07:00
2026-10-06 07:21:43 +00:00
2026-10-18 12:56:04 +00:00
2026-10-19 00:34:01 +00:00
2026-05-26 15:49:31 -07:00
2026-10-08 08:52:24 +00:00
2026-08-29 19:54:07 +00:00
2026-10-18 06:29:49 -07:00
2026-06-18 12:02:11 +00:00
2026-08-09 10:25:06 +00:00
2026-10-18 12:56:04 +00:00
2026-07-12 17:14:09 +00:00
2026-10-18 06:29:49 -07:00
2026-05-26 15:49:31 -07:00
2026-07-31 11:05:41 +00:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-08-26 17:24:07 +02:00
2026-10-04 16:26:14 +08:00
2026-10-16 08:29:25 -07:00
2026-08-11 18:01:02 +02:00
2026-10-18 12:56:04 +00:00
2026-09-29 14:43:36 +02:00
2026-10-02 19:28:51 +00:00
2026-05-26 15:49:31 -07:00
2026-08-09 10:25:06 +00:00
2026-10-12 20:57:41 +00:00
2026-08-21 07:28:23 +00:00
2026-05-26 15:49:31 -07:00
2026-08-17 20:30:24 +00:00
2026-05-26 15:49:31 -07:00
2026-08-17 20:30:24 +00:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2022-09-02 15:18:23 -04:00
2026-10-19 00:34:01 +00:00
2026-08-08 13:53:28 +00:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-09-02 17:07:04 +00:00
2026-10-14 12:07:31 +00:00
2026-10-18 12:56:04 +00:00
2026-09-08 15:59:06 +00:00
2026-10-06 17:28:28 +00:00
2026-10-19 00:34:01 +00:00
2026-08-22 08:59:37 +00:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-09-16 12:30:22 +02:00
2026-08-10 01:25:31 +00:00
2026-05-26 15:49:31 -07:00
2026-09-23 14:34:19 +00:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-10-19 00:34:01 +00:00
2026-06-17 16:06:51 +00:00
2026-10-08 10:36:08 +02:00
2026-08-17 07:59:41 +00:00
2026-05-26 15:49:31 -07:00
2026-10-03 02:28:34 +00:00
2026-10-18 06:29:49 -07:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-10-18 12:56:04 +00:00
2026-08-03 06:41:27 +00:00
2026-10-02 21:08:14 +02:00
2026-05-26 15:49:31 -07:00
2026-08-18 04:02:52 +00:00
2026-05-26 15:49:31 -07:00
2026-10-02 22:21:41 +08:00
2026-08-27 16:34:44 +00:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-09-12 08:15:23 +00:00
2026-08-17 18:17:16 +00:00
2026-10-18 06:29:49 -07:00
2026-05-26 15:49:31 -07:00
2026-05-26 15:49:31 -07:00
2026-10-05 19:12:22 +02:00
2026-10-04 16:26:14 +08:00
2026-10-19 00:34:01 +00:00