From cd08a92e5c9c45af627eff75200fc9396b648087 Mon Sep 17 00:00:00 2001 From: Jonathan Miller Date: Sun, 21 Jun 2026 10:03:22 -0500 Subject: [PATCH] feat: make metadata/manifest GET endpoint publicly accessible (#676) Remove reqRepoReader auth requirement from GET /repos/{owner}/{repo}/metadata and /manifest endpoints. PUT (update) still requires token + admin. --- routers/api/v1/api.go | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) diff --git a/routers/api/v1/api.go b/routers/api/v1/api.go index 752f693579..1c67e347bc 100644 --- a/routers/api/v1/api.go +++ b/routers/api/v1/api.go @@ -1480,12 +1480,10 @@ func Routes() *web.Router { Delete(reqToken(), repo.DeleteTopic) }, reqAdmin()) }, reqAnyRepoReader()) - m.Combo("/metadata", reqRepoReader(unit.TypeCode)). - Get(repo.GetRepoMetadata). - Put(reqToken(), reqAdmin(), repo.UpdateRepoMetadata) - m.Combo("/manifest", reqRepoReader(unit.TypeCode)). // backward compat - Get(repo.GetRepoMetadata). - Put(reqToken(), reqAdmin(), repo.UpdateRepoMetadata) + m.Get("/metadata", repo.GetRepoMetadata) + m.Put("/metadata", reqToken(), reqAdmin(), repo.UpdateRepoMetadata) + m.Get("/manifest", repo.GetRepoMetadata) // backward compat + m.Put("/manifest", reqToken(), reqAdmin(), repo.UpdateRepoMetadata) // MokoGitea badge engine m.Get("/badge/{type}.svg", repo.GetRepoBadge) m.Get("/issue_templates", reqRepoReader(unit.TypeCode), context.ReferencesGitRepo(), repo.GetIssueTemplates) -- 2.52.0