|
|
|
@ -70,6 +70,7 @@ import ( |
|
|
|
"strings" |
|
|
|
"strings" |
|
|
|
|
|
|
|
|
|
|
|
"code.gitea.io/gitea/models" |
|
|
|
"code.gitea.io/gitea/models" |
|
|
|
|
|
|
|
"code.gitea.io/gitea/models/unit" |
|
|
|
"code.gitea.io/gitea/modules/context" |
|
|
|
"code.gitea.io/gitea/modules/context" |
|
|
|
"code.gitea.io/gitea/modules/log" |
|
|
|
"code.gitea.io/gitea/modules/log" |
|
|
|
"code.gitea.io/gitea/modules/setting" |
|
|
|
"code.gitea.io/gitea/modules/setting" |
|
|
|
@ -253,7 +254,7 @@ func reqAdmin() func(ctx *context.APIContext) { |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
// reqRepoWriter user should have a permission to write to a repo, or be a site admin
|
|
|
|
// reqRepoWriter user should have a permission to write to a repo, or be a site admin
|
|
|
|
func reqRepoWriter(unitTypes ...models.UnitType) func(ctx *context.APIContext) { |
|
|
|
func reqRepoWriter(unitTypes ...unit.Type) func(ctx *context.APIContext) { |
|
|
|
return func(ctx *context.APIContext) { |
|
|
|
return func(ctx *context.APIContext) { |
|
|
|
if !ctx.IsUserRepoWriter(unitTypes) && !ctx.IsUserRepoAdmin() && !ctx.IsUserSiteAdmin() { |
|
|
|
if !ctx.IsUserRepoWriter(unitTypes) && !ctx.IsUserRepoAdmin() && !ctx.IsUserSiteAdmin() { |
|
|
|
ctx.Error(http.StatusForbidden, "reqRepoWriter", "user should have a permission to write to a repo") |
|
|
|
ctx.Error(http.StatusForbidden, "reqRepoWriter", "user should have a permission to write to a repo") |
|
|
|
@ -263,7 +264,7 @@ func reqRepoWriter(unitTypes ...models.UnitType) func(ctx *context.APIContext) { |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
// reqRepoReader user should have specific read permission or be a repo admin or a site admin
|
|
|
|
// reqRepoReader user should have specific read permission or be a repo admin or a site admin
|
|
|
|
func reqRepoReader(unitType models.UnitType) func(ctx *context.APIContext) { |
|
|
|
func reqRepoReader(unitType unit.Type) func(ctx *context.APIContext) { |
|
|
|
return func(ctx *context.APIContext) { |
|
|
|
return func(ctx *context.APIContext) { |
|
|
|
if !ctx.IsUserRepoReaderSpecific(unitType) && !ctx.IsUserRepoAdmin() && !ctx.IsUserSiteAdmin() { |
|
|
|
if !ctx.IsUserRepoReaderSpecific(unitType) && !ctx.IsUserRepoAdmin() && !ctx.IsUserSiteAdmin() { |
|
|
|
ctx.Error(http.StatusForbidden, "reqRepoReader", "user should have specific read permission or be a repo admin or a site admin") |
|
|
|
ctx.Error(http.StatusForbidden, "reqRepoReader", "user should have specific read permission or be a repo admin or a site admin") |
|
|
|
@ -450,19 +451,19 @@ func orgAssignment(args ...bool) func(ctx *context.APIContext) { |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
func mustEnableIssues(ctx *context.APIContext) { |
|
|
|
func mustEnableIssues(ctx *context.APIContext) { |
|
|
|
if !ctx.Repo.CanRead(models.UnitTypeIssues) { |
|
|
|
if !ctx.Repo.CanRead(unit.TypeIssues) { |
|
|
|
if log.IsTrace() { |
|
|
|
if log.IsTrace() { |
|
|
|
if ctx.IsSigned { |
|
|
|
if ctx.IsSigned { |
|
|
|
log.Trace("Permission Denied: User %-v cannot read %-v in Repo %-v\n"+ |
|
|
|
log.Trace("Permission Denied: User %-v cannot read %-v in Repo %-v\n"+ |
|
|
|
"User in Repo has Permissions: %-+v", |
|
|
|
"User in Repo has Permissions: %-+v", |
|
|
|
ctx.User, |
|
|
|
ctx.User, |
|
|
|
models.UnitTypeIssues, |
|
|
|
unit.TypeIssues, |
|
|
|
ctx.Repo.Repository, |
|
|
|
ctx.Repo.Repository, |
|
|
|
ctx.Repo.Permission) |
|
|
|
ctx.Repo.Permission) |
|
|
|
} else { |
|
|
|
} else { |
|
|
|
log.Trace("Permission Denied: Anonymous user cannot read %-v in Repo %-v\n"+ |
|
|
|
log.Trace("Permission Denied: Anonymous user cannot read %-v in Repo %-v\n"+ |
|
|
|
"Anonymous user in Repo has Permissions: %-+v", |
|
|
|
"Anonymous user in Repo has Permissions: %-+v", |
|
|
|
models.UnitTypeIssues, |
|
|
|
unit.TypeIssues, |
|
|
|
ctx.Repo.Repository, |
|
|
|
ctx.Repo.Repository, |
|
|
|
ctx.Repo.Permission) |
|
|
|
ctx.Repo.Permission) |
|
|
|
} |
|
|
|
} |
|
|
|
@ -473,19 +474,19 @@ func mustEnableIssues(ctx *context.APIContext) { |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
func mustAllowPulls(ctx *context.APIContext) { |
|
|
|
func mustAllowPulls(ctx *context.APIContext) { |
|
|
|
if !(ctx.Repo.Repository.CanEnablePulls() && ctx.Repo.CanRead(models.UnitTypePullRequests)) { |
|
|
|
if !(ctx.Repo.Repository.CanEnablePulls() && ctx.Repo.CanRead(unit.TypePullRequests)) { |
|
|
|
if ctx.Repo.Repository.CanEnablePulls() && log.IsTrace() { |
|
|
|
if ctx.Repo.Repository.CanEnablePulls() && log.IsTrace() { |
|
|
|
if ctx.IsSigned { |
|
|
|
if ctx.IsSigned { |
|
|
|
log.Trace("Permission Denied: User %-v cannot read %-v in Repo %-v\n"+ |
|
|
|
log.Trace("Permission Denied: User %-v cannot read %-v in Repo %-v\n"+ |
|
|
|
"User in Repo has Permissions: %-+v", |
|
|
|
"User in Repo has Permissions: %-+v", |
|
|
|
ctx.User, |
|
|
|
ctx.User, |
|
|
|
models.UnitTypePullRequests, |
|
|
|
unit.TypePullRequests, |
|
|
|
ctx.Repo.Repository, |
|
|
|
ctx.Repo.Repository, |
|
|
|
ctx.Repo.Permission) |
|
|
|
ctx.Repo.Permission) |
|
|
|
} else { |
|
|
|
} else { |
|
|
|
log.Trace("Permission Denied: Anonymous user cannot read %-v in Repo %-v\n"+ |
|
|
|
log.Trace("Permission Denied: Anonymous user cannot read %-v in Repo %-v\n"+ |
|
|
|
"Anonymous user in Repo has Permissions: %-+v", |
|
|
|
"Anonymous user in Repo has Permissions: %-+v", |
|
|
|
models.UnitTypePullRequests, |
|
|
|
unit.TypePullRequests, |
|
|
|
ctx.Repo.Repository, |
|
|
|
ctx.Repo.Repository, |
|
|
|
ctx.Repo.Permission) |
|
|
|
ctx.Repo.Permission) |
|
|
|
} |
|
|
|
} |
|
|
|
@ -496,22 +497,22 @@ func mustAllowPulls(ctx *context.APIContext) { |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
func mustEnableIssuesOrPulls(ctx *context.APIContext) { |
|
|
|
func mustEnableIssuesOrPulls(ctx *context.APIContext) { |
|
|
|
if !ctx.Repo.CanRead(models.UnitTypeIssues) && |
|
|
|
if !ctx.Repo.CanRead(unit.TypeIssues) && |
|
|
|
!(ctx.Repo.Repository.CanEnablePulls() && ctx.Repo.CanRead(models.UnitTypePullRequests)) { |
|
|
|
!(ctx.Repo.Repository.CanEnablePulls() && ctx.Repo.CanRead(unit.TypePullRequests)) { |
|
|
|
if ctx.Repo.Repository.CanEnablePulls() && log.IsTrace() { |
|
|
|
if ctx.Repo.Repository.CanEnablePulls() && log.IsTrace() { |
|
|
|
if ctx.IsSigned { |
|
|
|
if ctx.IsSigned { |
|
|
|
log.Trace("Permission Denied: User %-v cannot read %-v and %-v in Repo %-v\n"+ |
|
|
|
log.Trace("Permission Denied: User %-v cannot read %-v and %-v in Repo %-v\n"+ |
|
|
|
"User in Repo has Permissions: %-+v", |
|
|
|
"User in Repo has Permissions: %-+v", |
|
|
|
ctx.User, |
|
|
|
ctx.User, |
|
|
|
models.UnitTypeIssues, |
|
|
|
unit.TypeIssues, |
|
|
|
models.UnitTypePullRequests, |
|
|
|
unit.TypePullRequests, |
|
|
|
ctx.Repo.Repository, |
|
|
|
ctx.Repo.Repository, |
|
|
|
ctx.Repo.Permission) |
|
|
|
ctx.Repo.Permission) |
|
|
|
} else { |
|
|
|
} else { |
|
|
|
log.Trace("Permission Denied: Anonymous user cannot read %-v and %-v in Repo %-v\n"+ |
|
|
|
log.Trace("Permission Denied: Anonymous user cannot read %-v and %-v in Repo %-v\n"+ |
|
|
|
"Anonymous user in Repo has Permissions: %-+v", |
|
|
|
"Anonymous user in Repo has Permissions: %-+v", |
|
|
|
models.UnitTypeIssues, |
|
|
|
unit.TypeIssues, |
|
|
|
models.UnitTypePullRequests, |
|
|
|
unit.TypePullRequests, |
|
|
|
ctx.Repo.Repository, |
|
|
|
ctx.Repo.Repository, |
|
|
|
ctx.Repo.Permission) |
|
|
|
ctx.Repo.Permission) |
|
|
|
} |
|
|
|
} |
|
|
|
@ -522,7 +523,7 @@ func mustEnableIssuesOrPulls(ctx *context.APIContext) { |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
func mustEnableWiki(ctx *context.APIContext) { |
|
|
|
func mustEnableWiki(ctx *context.APIContext) { |
|
|
|
if !(ctx.Repo.CanRead(models.UnitTypeWiki)) { |
|
|
|
if !(ctx.Repo.CanRead(unit.TypeWiki)) { |
|
|
|
ctx.NotFound() |
|
|
|
ctx.NotFound() |
|
|
|
return |
|
|
|
return |
|
|
|
} |
|
|
|
} |
|
|
|
@ -726,7 +727,7 @@ func Routes(sessioner func(http.Handler) http.Handler) *web.Route { |
|
|
|
m.Combo("").Get(reqAnyRepoReader(), repo.Get). |
|
|
|
m.Combo("").Get(reqAnyRepoReader(), repo.Get). |
|
|
|
Delete(reqToken(), reqOwner(), repo.Delete). |
|
|
|
Delete(reqToken(), reqOwner(), repo.Delete). |
|
|
|
Patch(reqToken(), reqAdmin(), bind(api.EditRepoOption{}), repo.Edit) |
|
|
|
Patch(reqToken(), reqAdmin(), bind(api.EditRepoOption{}), repo.Edit) |
|
|
|
m.Post("/generate", reqToken(), reqRepoReader(models.UnitTypeCode), bind(api.GenerateRepoOption{}), repo.Generate) |
|
|
|
m.Post("/generate", reqToken(), reqRepoReader(unit.TypeCode), bind(api.GenerateRepoOption{}), repo.Generate) |
|
|
|
m.Post("/transfer", reqOwner(), bind(api.TransferRepoOption{}), repo.Transfer) |
|
|
|
m.Post("/transfer", reqOwner(), bind(api.TransferRepoOption{}), repo.Transfer) |
|
|
|
m.Combo("/notifications"). |
|
|
|
m.Combo("/notifications"). |
|
|
|
Get(reqToken(), notify.ListRepoNotifications). |
|
|
|
Get(reqToken(), notify.ListRepoNotifications). |
|
|
|
@ -763,16 +764,16 @@ func Routes(sessioner func(http.Handler) http.Handler) *web.Route { |
|
|
|
Put(reqAdmin(), repo.AddTeam). |
|
|
|
Put(reqAdmin(), repo.AddTeam). |
|
|
|
Delete(reqAdmin(), repo.DeleteTeam) |
|
|
|
Delete(reqAdmin(), repo.DeleteTeam) |
|
|
|
}, reqToken()) |
|
|
|
}, reqToken()) |
|
|
|
m.Get("/raw/*", context.RepoRefForAPI, reqRepoReader(models.UnitTypeCode), repo.GetRawFile) |
|
|
|
m.Get("/raw/*", context.RepoRefForAPI, reqRepoReader(unit.TypeCode), repo.GetRawFile) |
|
|
|
m.Get("/archive/*", reqRepoReader(models.UnitTypeCode), repo.GetArchive) |
|
|
|
m.Get("/archive/*", reqRepoReader(unit.TypeCode), repo.GetArchive) |
|
|
|
m.Combo("/forks").Get(repo.ListForks). |
|
|
|
m.Combo("/forks").Get(repo.ListForks). |
|
|
|
Post(reqToken(), reqRepoReader(models.UnitTypeCode), bind(api.CreateForkOption{}), repo.CreateFork) |
|
|
|
Post(reqToken(), reqRepoReader(unit.TypeCode), bind(api.CreateForkOption{}), repo.CreateFork) |
|
|
|
m.Group("/branches", func() { |
|
|
|
m.Group("/branches", func() { |
|
|
|
m.Get("", repo.ListBranches) |
|
|
|
m.Get("", repo.ListBranches) |
|
|
|
m.Get("/*", repo.GetBranch) |
|
|
|
m.Get("/*", repo.GetBranch) |
|
|
|
m.Delete("/*", context.ReferencesGitRepo(false), reqRepoWriter(models.UnitTypeCode), repo.DeleteBranch) |
|
|
|
m.Delete("/*", context.ReferencesGitRepo(false), reqRepoWriter(unit.TypeCode), repo.DeleteBranch) |
|
|
|
m.Post("", reqRepoWriter(models.UnitTypeCode), bind(api.CreateBranchRepoOption{}), repo.CreateBranch) |
|
|
|
m.Post("", reqRepoWriter(unit.TypeCode), bind(api.CreateBranchRepoOption{}), repo.CreateBranch) |
|
|
|
}, reqRepoReader(models.UnitTypeCode)) |
|
|
|
}, reqRepoReader(unit.TypeCode)) |
|
|
|
m.Group("/branch_protections", func() { |
|
|
|
m.Group("/branch_protections", func() { |
|
|
|
m.Get("", repo.ListBranchProtections) |
|
|
|
m.Get("", repo.ListBranchProtections) |
|
|
|
m.Post("", bind(api.CreateBranchProtectionOption{}), repo.CreateBranchProtection) |
|
|
|
m.Post("", bind(api.CreateBranchProtectionOption{}), repo.CreateBranchProtection) |
|
|
|
@ -785,9 +786,9 @@ func Routes(sessioner func(http.Handler) http.Handler) *web.Route { |
|
|
|
m.Group("/tags", func() { |
|
|
|
m.Group("/tags", func() { |
|
|
|
m.Get("", repo.ListTags) |
|
|
|
m.Get("", repo.ListTags) |
|
|
|
m.Get("/*", repo.GetTag) |
|
|
|
m.Get("/*", repo.GetTag) |
|
|
|
m.Post("", reqRepoWriter(models.UnitTypeCode), bind(api.CreateTagOption{}), repo.CreateTag) |
|
|
|
m.Post("", reqRepoWriter(unit.TypeCode), bind(api.CreateTagOption{}), repo.CreateTag) |
|
|
|
m.Delete("/*", repo.DeleteTag) |
|
|
|
m.Delete("/*", repo.DeleteTag) |
|
|
|
}, reqRepoReader(models.UnitTypeCode), context.ReferencesGitRepo(true)) |
|
|
|
}, reqRepoReader(unit.TypeCode), context.ReferencesGitRepo(true)) |
|
|
|
m.Group("/keys", func() { |
|
|
|
m.Group("/keys", func() { |
|
|
|
m.Combo("").Get(repo.ListDeployKeys). |
|
|
|
m.Combo("").Get(repo.ListDeployKeys). |
|
|
|
Post(bind(api.CreateKeyOption{}), repo.CreateDeployKey) |
|
|
|
Post(bind(api.CreateKeyOption{}), repo.CreateDeployKey) |
|
|
|
@ -801,10 +802,10 @@ func Routes(sessioner func(http.Handler) http.Handler) *web.Route { |
|
|
|
m.Group("/wiki", func() { |
|
|
|
m.Group("/wiki", func() { |
|
|
|
m.Combo("/page/{pageName}"). |
|
|
|
m.Combo("/page/{pageName}"). |
|
|
|
Get(repo.GetWikiPage). |
|
|
|
Get(repo.GetWikiPage). |
|
|
|
Patch(mustNotBeArchived, reqRepoWriter(models.UnitTypeWiki), bind(api.CreateWikiPageOptions{}), repo.EditWikiPage). |
|
|
|
Patch(mustNotBeArchived, reqRepoWriter(unit.TypeWiki), bind(api.CreateWikiPageOptions{}), repo.EditWikiPage). |
|
|
|
Delete(mustNotBeArchived, reqRepoWriter(models.UnitTypeWiki), repo.DeleteWikiPage) |
|
|
|
Delete(mustNotBeArchived, reqRepoWriter(unit.TypeWiki), repo.DeleteWikiPage) |
|
|
|
m.Get("/revisions/{pageName}", repo.ListPageRevisions) |
|
|
|
m.Get("/revisions/{pageName}", repo.ListPageRevisions) |
|
|
|
m.Post("/new", mustNotBeArchived, reqRepoWriter(models.UnitTypeWiki), bind(api.CreateWikiPageOptions{}), repo.NewWikiPage) |
|
|
|
m.Post("/new", mustNotBeArchived, reqRepoWriter(unit.TypeWiki), bind(api.CreateWikiPageOptions{}), repo.NewWikiPage) |
|
|
|
m.Get("/pages", repo.ListWikiPages) |
|
|
|
m.Get("/pages", repo.ListWikiPages) |
|
|
|
}, mustEnableWiki) |
|
|
|
}, mustEnableWiki) |
|
|
|
m.Group("/issues", func() { |
|
|
|
m.Group("/issues", func() { |
|
|
|
@ -866,19 +867,19 @@ func Routes(sessioner func(http.Handler) http.Handler) *web.Route { |
|
|
|
}, mustEnableIssuesOrPulls) |
|
|
|
}, mustEnableIssuesOrPulls) |
|
|
|
m.Group("/labels", func() { |
|
|
|
m.Group("/labels", func() { |
|
|
|
m.Combo("").Get(repo.ListLabels). |
|
|
|
m.Combo("").Get(repo.ListLabels). |
|
|
|
Post(reqToken(), reqRepoWriter(models.UnitTypeIssues, models.UnitTypePullRequests), bind(api.CreateLabelOption{}), repo.CreateLabel) |
|
|
|
Post(reqToken(), reqRepoWriter(unit.TypeIssues, unit.TypePullRequests), bind(api.CreateLabelOption{}), repo.CreateLabel) |
|
|
|
m.Combo("/{id}").Get(repo.GetLabel). |
|
|
|
m.Combo("/{id}").Get(repo.GetLabel). |
|
|
|
Patch(reqToken(), reqRepoWriter(models.UnitTypeIssues, models.UnitTypePullRequests), bind(api.EditLabelOption{}), repo.EditLabel). |
|
|
|
Patch(reqToken(), reqRepoWriter(unit.TypeIssues, unit.TypePullRequests), bind(api.EditLabelOption{}), repo.EditLabel). |
|
|
|
Delete(reqToken(), reqRepoWriter(models.UnitTypeIssues, models.UnitTypePullRequests), repo.DeleteLabel) |
|
|
|
Delete(reqToken(), reqRepoWriter(unit.TypeIssues, unit.TypePullRequests), repo.DeleteLabel) |
|
|
|
}) |
|
|
|
}) |
|
|
|
m.Post("/markdown", bind(api.MarkdownOption{}), misc.Markdown) |
|
|
|
m.Post("/markdown", bind(api.MarkdownOption{}), misc.Markdown) |
|
|
|
m.Post("/markdown/raw", misc.MarkdownRaw) |
|
|
|
m.Post("/markdown/raw", misc.MarkdownRaw) |
|
|
|
m.Group("/milestones", func() { |
|
|
|
m.Group("/milestones", func() { |
|
|
|
m.Combo("").Get(repo.ListMilestones). |
|
|
|
m.Combo("").Get(repo.ListMilestones). |
|
|
|
Post(reqToken(), reqRepoWriter(models.UnitTypeIssues, models.UnitTypePullRequests), bind(api.CreateMilestoneOption{}), repo.CreateMilestone) |
|
|
|
Post(reqToken(), reqRepoWriter(unit.TypeIssues, unit.TypePullRequests), bind(api.CreateMilestoneOption{}), repo.CreateMilestone) |
|
|
|
m.Combo("/{id}").Get(repo.GetMilestone). |
|
|
|
m.Combo("/{id}").Get(repo.GetMilestone). |
|
|
|
Patch(reqToken(), reqRepoWriter(models.UnitTypeIssues, models.UnitTypePullRequests), bind(api.EditMilestoneOption{}), repo.EditMilestone). |
|
|
|
Patch(reqToken(), reqRepoWriter(unit.TypeIssues, unit.TypePullRequests), bind(api.EditMilestoneOption{}), repo.EditMilestone). |
|
|
|
Delete(reqToken(), reqRepoWriter(models.UnitTypeIssues, models.UnitTypePullRequests), repo.DeleteMilestone) |
|
|
|
Delete(reqToken(), reqRepoWriter(unit.TypeIssues, unit.TypePullRequests), repo.DeleteMilestone) |
|
|
|
}) |
|
|
|
}) |
|
|
|
m.Get("/stargazers", repo.ListStargazers) |
|
|
|
m.Get("/stargazers", repo.ListStargazers) |
|
|
|
m.Get("/subscribers", repo.ListSubscribers) |
|
|
|
m.Get("/subscribers", repo.ListSubscribers) |
|
|
|
@ -889,27 +890,27 @@ func Routes(sessioner func(http.Handler) http.Handler) *web.Route { |
|
|
|
}) |
|
|
|
}) |
|
|
|
m.Group("/releases", func() { |
|
|
|
m.Group("/releases", func() { |
|
|
|
m.Combo("").Get(repo.ListReleases). |
|
|
|
m.Combo("").Get(repo.ListReleases). |
|
|
|
Post(reqToken(), reqRepoWriter(models.UnitTypeReleases), context.ReferencesGitRepo(false), bind(api.CreateReleaseOption{}), repo.CreateRelease) |
|
|
|
Post(reqToken(), reqRepoWriter(unit.TypeReleases), context.ReferencesGitRepo(false), bind(api.CreateReleaseOption{}), repo.CreateRelease) |
|
|
|
m.Group("/{id}", func() { |
|
|
|
m.Group("/{id}", func() { |
|
|
|
m.Combo("").Get(repo.GetRelease). |
|
|
|
m.Combo("").Get(repo.GetRelease). |
|
|
|
Patch(reqToken(), reqRepoWriter(models.UnitTypeReleases), context.ReferencesGitRepo(false), bind(api.EditReleaseOption{}), repo.EditRelease). |
|
|
|
Patch(reqToken(), reqRepoWriter(unit.TypeReleases), context.ReferencesGitRepo(false), bind(api.EditReleaseOption{}), repo.EditRelease). |
|
|
|
Delete(reqToken(), reqRepoWriter(models.UnitTypeReleases), repo.DeleteRelease) |
|
|
|
Delete(reqToken(), reqRepoWriter(unit.TypeReleases), repo.DeleteRelease) |
|
|
|
m.Group("/assets", func() { |
|
|
|
m.Group("/assets", func() { |
|
|
|
m.Combo("").Get(repo.ListReleaseAttachments). |
|
|
|
m.Combo("").Get(repo.ListReleaseAttachments). |
|
|
|
Post(reqToken(), reqRepoWriter(models.UnitTypeReleases), repo.CreateReleaseAttachment) |
|
|
|
Post(reqToken(), reqRepoWriter(unit.TypeReleases), repo.CreateReleaseAttachment) |
|
|
|
m.Combo("/{asset}").Get(repo.GetReleaseAttachment). |
|
|
|
m.Combo("/{asset}").Get(repo.GetReleaseAttachment). |
|
|
|
Patch(reqToken(), reqRepoWriter(models.UnitTypeReleases), bind(api.EditAttachmentOptions{}), repo.EditReleaseAttachment). |
|
|
|
Patch(reqToken(), reqRepoWriter(unit.TypeReleases), bind(api.EditAttachmentOptions{}), repo.EditReleaseAttachment). |
|
|
|
Delete(reqToken(), reqRepoWriter(models.UnitTypeReleases), repo.DeleteReleaseAttachment) |
|
|
|
Delete(reqToken(), reqRepoWriter(unit.TypeReleases), repo.DeleteReleaseAttachment) |
|
|
|
}) |
|
|
|
}) |
|
|
|
}) |
|
|
|
}) |
|
|
|
m.Group("/tags", func() { |
|
|
|
m.Group("/tags", func() { |
|
|
|
m.Combo("/{tag}"). |
|
|
|
m.Combo("/{tag}"). |
|
|
|
Get(repo.GetReleaseByTag). |
|
|
|
Get(repo.GetReleaseByTag). |
|
|
|
Delete(reqToken(), reqRepoWriter(models.UnitTypeReleases), repo.DeleteReleaseByTag) |
|
|
|
Delete(reqToken(), reqRepoWriter(unit.TypeReleases), repo.DeleteReleaseByTag) |
|
|
|
}) |
|
|
|
}) |
|
|
|
}, reqRepoReader(models.UnitTypeReleases)) |
|
|
|
}, reqRepoReader(unit.TypeReleases)) |
|
|
|
m.Post("/mirror-sync", reqToken(), reqRepoWriter(models.UnitTypeCode), repo.MirrorSync) |
|
|
|
m.Post("/mirror-sync", reqToken(), reqRepoWriter(unit.TypeCode), repo.MirrorSync) |
|
|
|
m.Get("/editorconfig/{filename}", context.RepoRefForAPI, reqRepoReader(models.UnitTypeCode), repo.GetEditorconfig) |
|
|
|
m.Get("/editorconfig/{filename}", context.RepoRefForAPI, reqRepoReader(unit.TypeCode), repo.GetEditorconfig) |
|
|
|
m.Group("/pulls", func() { |
|
|
|
m.Group("/pulls", func() { |
|
|
|
m.Combo("").Get(repo.ListPullRequests). |
|
|
|
m.Combo("").Get(repo.ListPullRequests). |
|
|
|
Post(reqToken(), mustNotBeArchived, bind(api.CreatePullRequestOption{}), repo.CreatePullRequest) |
|
|
|
Post(reqToken(), mustNotBeArchived, bind(api.CreatePullRequestOption{}), repo.CreatePullRequest) |
|
|
|
@ -940,18 +941,18 @@ func Routes(sessioner func(http.Handler) http.Handler) *web.Route { |
|
|
|
Delete(reqToken(), bind(api.PullReviewRequestOptions{}), repo.DeleteReviewRequests). |
|
|
|
Delete(reqToken(), bind(api.PullReviewRequestOptions{}), repo.DeleteReviewRequests). |
|
|
|
Post(reqToken(), bind(api.PullReviewRequestOptions{}), repo.CreateReviewRequests) |
|
|
|
Post(reqToken(), bind(api.PullReviewRequestOptions{}), repo.CreateReviewRequests) |
|
|
|
}) |
|
|
|
}) |
|
|
|
}, mustAllowPulls, reqRepoReader(models.UnitTypeCode), context.ReferencesGitRepo(false)) |
|
|
|
}, mustAllowPulls, reqRepoReader(unit.TypeCode), context.ReferencesGitRepo(false)) |
|
|
|
m.Group("/statuses", func() { |
|
|
|
m.Group("/statuses", func() { |
|
|
|
m.Combo("/{sha}").Get(repo.GetCommitStatuses). |
|
|
|
m.Combo("/{sha}").Get(repo.GetCommitStatuses). |
|
|
|
Post(reqToken(), bind(api.CreateStatusOption{}), repo.NewCommitStatus) |
|
|
|
Post(reqToken(), bind(api.CreateStatusOption{}), repo.NewCommitStatus) |
|
|
|
}, reqRepoReader(models.UnitTypeCode)) |
|
|
|
}, reqRepoReader(unit.TypeCode)) |
|
|
|
m.Group("/commits", func() { |
|
|
|
m.Group("/commits", func() { |
|
|
|
m.Get("", repo.GetAllCommits) |
|
|
|
m.Get("", repo.GetAllCommits) |
|
|
|
m.Group("/{ref}", func() { |
|
|
|
m.Group("/{ref}", func() { |
|
|
|
m.Get("/status", repo.GetCombinedCommitStatusByRef) |
|
|
|
m.Get("/status", repo.GetCombinedCommitStatusByRef) |
|
|
|
m.Get("/statuses", repo.GetCommitStatusesByRef) |
|
|
|
m.Get("/statuses", repo.GetCommitStatusesByRef) |
|
|
|
}) |
|
|
|
}) |
|
|
|
}, reqRepoReader(models.UnitTypeCode)) |
|
|
|
}, reqRepoReader(unit.TypeCode)) |
|
|
|
m.Group("/git", func() { |
|
|
|
m.Group("/git", func() { |
|
|
|
m.Group("/commits", func() { |
|
|
|
m.Group("/commits", func() { |
|
|
|
m.Get("/{sha}", repo.GetSingleCommit) |
|
|
|
m.Get("/{sha}", repo.GetSingleCommit) |
|
|
|
@ -963,7 +964,7 @@ func Routes(sessioner func(http.Handler) http.Handler) *web.Route { |
|
|
|
m.Get("/blobs/{sha}", context.RepoRefForAPI, repo.GetBlob) |
|
|
|
m.Get("/blobs/{sha}", context.RepoRefForAPI, repo.GetBlob) |
|
|
|
m.Get("/tags/{sha}", context.RepoRefForAPI, repo.GetAnnotatedTag) |
|
|
|
m.Get("/tags/{sha}", context.RepoRefForAPI, repo.GetAnnotatedTag) |
|
|
|
m.Get("/notes/{sha}", repo.GetNote) |
|
|
|
m.Get("/notes/{sha}", repo.GetNote) |
|
|
|
}, reqRepoReader(models.UnitTypeCode)) |
|
|
|
}, reqRepoReader(unit.TypeCode)) |
|
|
|
m.Group("/contents", func() { |
|
|
|
m.Group("/contents", func() { |
|
|
|
m.Get("", repo.GetContentsList) |
|
|
|
m.Get("", repo.GetContentsList) |
|
|
|
m.Get("/*", repo.GetContents) |
|
|
|
m.Get("/*", repo.GetContents) |
|
|
|
@ -971,8 +972,8 @@ func Routes(sessioner func(http.Handler) http.Handler) *web.Route { |
|
|
|
m.Post("", bind(api.CreateFileOptions{}), repo.CreateFile) |
|
|
|
m.Post("", bind(api.CreateFileOptions{}), repo.CreateFile) |
|
|
|
m.Put("", bind(api.UpdateFileOptions{}), repo.UpdateFile) |
|
|
|
m.Put("", bind(api.UpdateFileOptions{}), repo.UpdateFile) |
|
|
|
m.Delete("", bind(api.DeleteFileOptions{}), repo.DeleteFile) |
|
|
|
m.Delete("", bind(api.DeleteFileOptions{}), repo.DeleteFile) |
|
|
|
}, reqRepoWriter(models.UnitTypeCode), reqToken()) |
|
|
|
}, reqRepoWriter(unit.TypeCode), reqToken()) |
|
|
|
}, reqRepoReader(models.UnitTypeCode)) |
|
|
|
}, reqRepoReader(unit.TypeCode)) |
|
|
|
m.Get("/signing-key.gpg", misc.SigningKey) |
|
|
|
m.Get("/signing-key.gpg", misc.SigningKey) |
|
|
|
m.Group("/topics", func() { |
|
|
|
m.Group("/topics", func() { |
|
|
|
m.Combo("").Get(repo.ListTopics). |
|
|
|
m.Combo("").Get(repo.ListTopics). |
|
|
|
@ -983,7 +984,7 @@ func Routes(sessioner func(http.Handler) http.Handler) *web.Route { |
|
|
|
}, reqAdmin()) |
|
|
|
}, reqAdmin()) |
|
|
|
}, reqAnyRepoReader()) |
|
|
|
}, reqAnyRepoReader()) |
|
|
|
m.Get("/issue_templates", context.ReferencesGitRepo(false), repo.GetIssueTemplates) |
|
|
|
m.Get("/issue_templates", context.ReferencesGitRepo(false), repo.GetIssueTemplates) |
|
|
|
m.Get("/languages", reqRepoReader(models.UnitTypeCode), repo.GetLanguages) |
|
|
|
m.Get("/languages", reqRepoReader(unit.TypeCode), repo.GetLanguages) |
|
|
|
}, repoAssignment()) |
|
|
|
}, repoAssignment()) |
|
|
|
}) |
|
|
|
}) |
|
|
|
|
|
|
|
|
|
|
|
|
Lunny Xiao
3 years ago
committed by
GitHub