Feature Request: Allow API to list and show public notes without authentication
Summary
Notes of issues in public repository are available for all users even if they are not logged in.
However, in API V4, the notes of issues endpoint returns 401 for non-logged-in users.
Steps to reproduce
$ curl -sI https://gitlab.com/meteorlxy/vssue/issues/1 | head -n 1
HTTP/1.1 200 OK
$ curl -sI https://gitlab.com/api/v4/projects/meteorlxy%2Fvssue/issues/1 | head -n 1
HTTP/1.1 200 OK
$ curl -sI https://gitlab.com/api/v4/projects/meteorlxy%2Fvssue/issues/1/notes | head -n 1
HTTP/1.1 401 Unauthorized
Example Project
https://vssue.js.org/demo/gitlab.html
Only the GitLab demo requires authorization to show the comments, while GitHub and Bitbucket doesn't.
What is the current bug behavior?
$ curl -sI https://gitlab.com/api/v4/projects/meteorlxy%2Fvssue/issues/1/notes | head -n 1
HTTP/1.1 401 Unauthorized
What is the expected correct behavior?
$ curl -sI https://gitlab.com/api/v4/projects/meteorlxy%2Fvssue/issues/1/notes | head -n 1
HTTP/1.1 200 OK
Results of GitLab environment info
Related issues
- gitlab-ce#35290
- gitlab-ce#40855