Require token for GET subscription endpoint (#28765) (#28778)

Backport #28765 for 1.21
go-gitea · Jan 13, 2024 · 56e722f · 56e722f
1 parent 80e5640
commit 56e722f
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/tests/integration/api_user_watch_test.go b/tests/integration/api_user_watch_test.go
@@ -63,7 +63,10 @@ func TestAPIWatch(t *testing.T) {
 	t.Run("IsWatching", func(t *testing.T) {
 		defer tests.PrintCurrentTest(t)()
 
-		req := NewRequest(t, "GET", fmt.Sprintf("/api/v1/repos/%s/subscription?token=%s", repo, tokenWithRepoScope))
+		req := NewRequest(t, "GET", fmt.Sprintf("/api/v1/repos/%s/subscription", repo))
+		MakeRequest(t, req, http.StatusUnauthorized)
+
+		req = NewRequest(t, "GET", fmt.Sprintf("/api/v1/repos/%s/subscription?token=%s", repo, tokenWithRepoScope))
 		MakeRequest(t, req, http.StatusOK)
 
 		req = NewRequest(t, "GET", fmt.Sprintf("/api/v1/repos/%s/subscription?token=%s", repo+"notexisting", tokenWithRepoScope))