Gitea

mirror of https://github.com/go-gitea/gitea.git synced 2026-06-18 22:48:28 +00:00

Files

bircni 6fb96fcfdf fix: allow git clone of private repos with anonymous code access (#38074 ) (#38146 )

Backport #38074

## Summary

Fixes #38062.

Private repositories with a code unit configured for **anonymous read
access** (Settings → Public Access → Code: anonymous view) could not be
cloned without credentials. The git HTTP auth gate (`httpBase`) only
bypassed authentication for non-private repos, ignoring the per-unit
anonymous access setting entirely.

- Check anonymous permissions via
`access_model.GetDoerRepoPermission(ctx, repo, nil)` + `CanAccess`
before requiring auth on pull operations, so the per-unit
`AnonymousAccessMode` is respected through the existing permission model
- This also correctly handles `setting.Repository.ForcePrivate` (which
the naive direct-field check would have missed)
- Push (receive-pack) and `RequireSignInViewStrict` continue to require
credentials as before

Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

2026-06-17 21:21:05 +00:00

e2e

fix(deps): update dependency mermaid to v11.15.0 [security], add e2e test (#37665 )

2026-05-12 08:37:33 +02:00

fuzz

Fix fuzz test (#33156 )

2025-01-09 15:15:47 +08:00

gitea-lfs-meta

Test views of LFS files (#22196 )

2022-12-23 07:41:56 +08:00

gitea-repositories-meta

Fix corrupted external render content (#35946 )