backport "Enforce token on api routes (#4840)" (#4905)

2025-12-16 18:59:17 +00:00 · 2018-09-11 10:39:32 -04:00
parent d918e63bc5
commit 1a68b3962f
17 changed files with 123 additions and 83 deletions
--- a/routers/api/v1/api.go
+++ b/routers/api/v1/api.go
@@ -132,7 +132,7 @@ func repoAssignment() macaron.Handler {
 // Contexter middleware already checks token for user sign in process.
 func reqToken() macaron.Handler {
 	return func(ctx *context.Context) {
-		if !ctx.IsSigned {
+		if true != ctx.Data["IsApiToken"] {
 			ctx.Error(401)
 			return
 		}