Commit Graph

10 Commits (1592e578ed3ac7190baed6165b093002b931520c)

Author SHA1 Message Date
unknwon 1592e578ed
routes/api: add missing permission checks for routes
Permission check not enforced for deploy keys, collaborators, and hooks.

Reported by @ManassehZhou #5764
2019-08-01 18:26:05 -07:00
Unknwon f91cb9321e
api: add GetReferenceSHA (#5546) 2018-12-16 19:47:32 -05:00
Unknwon ee82d35ed8
api: add GetSingleCommit (#5546) 2018-12-15 00:24:41 -05:00
Unknwon e1b3a25008
api/repo: support edit repository issue tracker (gogs/go-gogs-client#94) 2018-12-02 12:55:05 -05:00
Unknwon 69c1cd3f38
routes/api: change status handle to new style
Also fixed one bug that did not catch team not found error.
2018-12-01 21:41:30 -05:00
Unknwon ce13fbb98a
routes/api: allow get repository without login (#5475) 2018-12-01 21:40:19 -05:00
Unknwon 3db9b06a6e
api: fix critical CSRF vulnerabilities on API routes (#5355)
By explicitly requires token authentication.
2018-11-28 21:05:58 -05:00
Unknwon aff4208244
*: rename "gogits" to "gogs" 2018-05-27 08:53:48 +08:00
Anton Antonov 77c77fbd42 api: add endpoint /api/v1/user/orgs (#4835)
* Add API endpoint /api/v1/user/orgs

The difference between this endpoint and
/api/v1/admin/users/<username>/orgs,
is that here you're creating a repo with the `user`
that corresponds to the API token you're using.

* Extract duplicate API org creation
2017-11-13 22:27:30 -05:00
Unknwon 4400d2fdd9
Refactoring: rename package routers -> routes 2017-06-11 00:34:14 -04:00