Is it intended that when Gitea UI blocks reading PRs for anonymous users (not logged in), while the API still allows it? Is it only a proxy thing, or perhaps there is a security gap?
Example: https://gitea.com/gitea/awesome-gitea
Attempting to open the Pull Request list while not logged in, it redirects to login.
Calling the API (https://gitea.com/api/v1/repos/gitea/awesome-gitea/pulls?state=all&page=1&limit=50) directly gives me all the PRs visibile, instead of giving me 401.
I’m using the API/SDK topic since it’s related to the API, but i’m a little unsure whether it’s more fit to use General or Install/Maintain/Configure