gitea

mirror of https://github.com/go-gitea/gitea.git synced 2026-08-18 23:43:56 +09:00

Files

T

Giteabot 50be834d24 fix: allow anonymous theme switching when REQUIRE_SIGNIN_VIEW is set (#38956 ) (#38961 )

Backport #38956 by @bircni

Fixes https://github.com/go-gitea/gitea/issues/38950

`POST /-/web-theme/apply` used the `optSignIn` middleware, which forces
sign-in when `REQUIRE_SIGNIN_VIEW` is enabled. This made theme switching
unusable for anonymous users (e.g. on the sign-in page), even though the
handler already supports anonymous users by storing the choice in a
cookie.

This was an unintended regression from
https://github.com/go-gitea/gitea/pull/36183, which replaced the route's
CSRF-only middleware with `optSignIn`, incidentally pulling in the
sign-in requirement meant for content routes.

The fix drops the sign-in requirement for this route while keeping
cross-origin protection and the usual signed-in-user checks
(inactive/prohibited login, forced password change).

Co-authored-by: bircni <bircni@icloud.com>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

2026-08-18 07:24:18 +02:00

e2e

fix(auth): set WebAuthn user verification per request (#38810 )

2026-08-08 10:11:04 +00:00

fuzz

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873 )

2026-05-26 15:49:31 -07:00

gitea-lfs-meta

Test views of LFS files (#22196 )

2022-12-23 07:41:56 +08:00

gitea-repositories-meta

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873 )