[PR #5604] [CLOSED] security: some organization endpoints can be accessed without authorization #17862

New Issue

GiteaMirror · 2025-11-02T16:17:44-06:00

GiteaMirror commented

2025-11-02 16:17:44 -06:00

📋 Pull Request Information

Original PR: https://github.com/go-gitea/gitea/pull/5604
Author: @adelowo
Created: 12/27/2018
Status: ❌ Closed

Base: master ← Head: require_authorization

📝 Commits (1)

8f586ed security: some organization endpoints can be accessed without authorization

📊 Changes

2 files changed (+13 additions, -4 deletions)

View changed files

📝 integrations/api_repo_test.go (+10 -1)
📝 routers/api/v1/api.go (+3 -3)

📄 Description

Fixes #5603

I didn't add reqToken for the /api/v1/orgs/{org} endpoint as the returned information
is minimal and there is no notion of a public or private organization in Gitea.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/go-gitea/gitea/pull/5604 **Author:** [@adelowo](https://github.com/adelowo) **Created:** 12/27/2018 **Status:** ❌ Closed **Base:** `master` ← **Head:** `require_authorization` --- ### 📝 Commits (1) - [`8f586ed`](https://github.com/go-gitea/gitea/commit/8f586ed7231928c9d51868187dbcbb05111fdd06) security: some organization endpoints can be accessed without authorization ### 📊 Changes **2 files changed** (+13 additions, -4 deletions) <details> <summary>View changed files</summary> 📝 `integrations/api_repo_test.go` (+10 -1) 📝 `routers/api/v1/api.go` (+3 -3) </details> ### 📄 Description Fixes #5603 I didn't add `reqToken` for the `/api/v1/orgs/{org}` endpoint as the returned information is minimal and there is no notion of a public or private organization in Gitea. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

GiteaMirror added the pull-request label 2025-11-02 16:17:44 -06:00

GiteaMirror closed this issue

2025-11-02 16:17:47 -06:00

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/gitea#17862