lywsvip/server
1
0
Fork 0
mirror of https://github.com/gotify/server.git synced 2026-05-06 21:42:07 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: enforce elevated authentication

Browse Source
This commit is contained in:
Jannis Mattheis
2026-04-11 21:43:59 +02:00
parent c256025b9f
commit a8744482c6
7 changed files with 175 additions and 41 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
api/user.go
View File

@@ -69,6 +69,8 @@ type UserAPI struct {
//
// Return all users.
//
// Requires elevated authentication.
//
// ---
// produces: [application/json]
// security: [clientTokenAuthorizationHeader: [], clientTokenHeader: [], clientTokenQuery: [], basicAuth: []]
@@ -105,6 +107,8 @@ func (a *UserAPI) GetUsers(ctx *gin.Context) {
//
// Return the current user.
//
// Requires elevated authentication.
//
// ---
// produces: [application/json]
// security: [clientTokenAuthorizationHeader: [], clientTokenHeader: [], clientTokenQuery: [], basicAuth: []]
@@ -147,6 +151,8 @@ func (a *UserAPI) GetCurrentUser(ctx *gin.Context) {
// With enabled registration: non admin users can be created without authentication.
// With disabled registrations: users can only be created by admin users.
//
// Requires elevated authentication.
//
// ---
// consumes: [application/json]
// produces: [application/json]
@@ -233,6 +239,8 @@ func (a *UserAPI) CreateUser(ctx *gin.Context) {
//
// Get a user.
//
// Requires elevated authentication.
//
// ---
// consumes: [application/json]
// produces: [application/json]
@@ -284,6 +292,8 @@ func (a *UserAPI) GetUserByID(ctx *gin.Context) {
//
// Deletes a user.
//
// Requires elevated authentication.
//
// ---
// produces: [application/json]
// security: [clientTokenAuthorizationHeader: [], clientTokenHeader: [], clientTokenQuery: [], basicAuth: []]
@@ -344,6 +354,8 @@ func (a *UserAPI) DeleteUserByID(ctx *gin.Context) {
//
// Update the password of the current user.
//
// Requires elevated authentication.
//
// ---
// consumes: [application/json]
// produces: [application/json]
@@ -387,6 +399,8 @@ func (a *UserAPI) ChangePassword(ctx *gin.Context) {
//
// Update a user.
//
// Requires elevated authentication.
//
// ---
// consumes: [application/json]
// produces: [application/json]