feat: make metadata/manifest GET endpoint publicly accessible (#676)

Remove reqRepoReader auth requirement from GET /repos/{owner}/{repo}/metadata and /manifest endpoints. PUT (update) still requires token + admin.
2026-06-21 10:03:22 -05:00
parent 6a2c80a8f3
commit add7c0da4d
1 changed files with 4 additions and 6 deletions
@@ -1480,12 +1480,10 @@ func Routes() *web.Router {
 							Delete(reqToken(), repo.DeleteTopic)
 					}, reqAdmin())
 				}, reqAnyRepoReader())
-				m.Combo("/metadata", reqRepoReader(unit.TypeCode)).
-					Get(repo.GetRepoMetadata).
-					Put(reqToken(), reqAdmin(), repo.UpdateRepoMetadata)
-				m.Combo("/manifest", reqRepoReader(unit.TypeCode)). // backward compat
-					Get(repo.GetRepoMetadata).
-					Put(reqToken(), reqAdmin(), repo.UpdateRepoMetadata)
+				m.Get("/metadata", repo.GetRepoMetadata)
+				m.Put("/metadata", reqToken(), reqAdmin(), repo.UpdateRepoMetadata)
+				m.Get("/manifest", repo.GetRepoMetadata) // backward compat
+				m.Put("/manifest", reqToken(), reqAdmin(), repo.UpdateRepoMetadata)
 				// MokoGitea badge engine
 				m.Get("/badge/{type}.svg", repo.GetRepoBadge)
 				m.Get("/issue_templates", reqRepoReader(unit.TypeCode), context.ReferencesGitRepo(), repo.GetIssueTemplates)