Fix middlewares sequences (#14354)

Co-authored-by: 6543 <6543@obermui.de>

diff --git a/routers/api/v1/api.go b/routers/api/v1/api.go
index e9f1a395ed980039e19cfd93cd732b19db070015..02ad8ab3606d6ccba974a8832d6b59a885307bc4 100644 (file)
--- a/routers/api/v1/api.go
+++ b/routers/api/v1/api.go
@@ -640,7 +640,7 @@ func RegisterRoutes(m *macaron.Macaron) {
                        m.Group("/:username/:reponame", func() {
                                m.Combo("").Get(reqAnyRepoReader(), repo.Get).
                                        Delete(reqToken(), reqOwner(), repo.Delete).
-                                       Patch(reqToken(), reqAdmin(), bind(api.EditRepoOption{}), context.RepoRefForAPI(), repo.Edit)
+                                       Patch(reqToken(), reqAdmin(), context.RepoRefForAPI(), bind(api.EditRepoOption{}), repo.Edit)
                                m.Post("/transfer", reqOwner(), bind(api.TransferRepoOption{}), repo.Transfer)
                                m.Combo("/notifications").
                                        Get(reqToken(), notify.ListRepoNotifications).
@@ -713,8 +713,8 @@ func RegisterRoutes(m *macaron.Macaron) {
                                                                Delete(reqToken(), repo.DeleteIssueComment)
                                                        m.Combo("/reactions").
                                                                Get(repo.GetIssueCommentReactions).
-                                                               Post(bind(api.EditReactionOption{}), reqToken(), repo.PostIssueCommentReaction).
-                                                               Delete(bind(api.EditReactionOption{}), reqToken(), repo.DeleteIssueCommentReaction)
+                                                               Post(reqToken(), bind(api.EditReactionOption{}), repo.PostIssueCommentReaction).
+                                                               Delete(reqToken(), bind(api.EditReactionOption{}), repo.DeleteIssueCommentReaction)
                                                })
                                        })
                                        m.Group("/:index", func() {
@@ -754,8 +754,8 @@ func RegisterRoutes(m *macaron.Macaron) {
                                                })
                                                m.Combo("/reactions").
                                                        Get(repo.GetIssueReactions).
-                                                       Post(bind(api.EditReactionOption{}), reqToken(), repo.PostIssueReaction).
-                                                       Delete(bind(api.EditReactionOption{}), reqToken(), repo.DeleteIssueReaction)
+                                                       Post(reqToken(), bind(api.EditReactionOption{}), repo.PostIssueReaction).
+                                                       Delete(reqToken(), bind(api.EditReactionOption{}), repo.DeleteIssueReaction)
                                        })
                                }, mustEnableIssuesOrPulls)
                                m.Group("/labels", func() {