davrot/forgejo_backup
1
0
Fork 0
mirror of https://codeberg.org/davrot/forgejo.git synced 2025-05-19 20:00:03 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Remove "misc" scope check from public API endpoints (#26134) (#26149)

Browse source 
Backport #26134 by @wxiaoguang

Fix #26035

Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
(cherry picked from commit a8445e93204ab91065c45223bf5d4f7e06578549)
This commit is contained in:
Giteabot 2023-07-26 01:32:41 -04:00 • committed by Earl Warren
parent bbc3426c53
commit df5200e814
No known key found for this signature in database
GPG key ID: 0579CB2928A78A00
4 changed files with 33 additions and 63 deletions
Download patch file Download diff file Expand all files Collapse all files

30
tests/integration/api_token_test.go
View file

@ -141,26 +141,6 @@ func TestAPIDeniesPermissionBasedOnTokenScope(t *testing.T) {
},
},
},
{
"/api/v1/markdown",
"POST",
[]permission{
{
auth_model.AccessTokenScopeCategoryMisc,
auth_model.Write,
},
},
},
{
"/api/v1/markdown/raw",
"POST",
[]permission{
{
auth_model.AccessTokenScopeCategoryMisc,
auth_model.Write,
},
},
},
{
"/api/v1/notifications",
"GET",
@ -347,16 +327,6 @@ func TestAPIDeniesPermissionBasedOnTokenScope(t *testing.T) {
},
},
},
{
"/api/v1/settings/api",
"GET",
[]permission{
{
auth_model.AccessTokenScopeCategoryMisc,
auth_model.Read,
},
},
},
{
"/api/v1/user",
"GET",