fix(team,repo,org,wiki,auth): detect a kept admin permission, validate topics up front, page public members, name disabled wikis, treat auth switch's account as --user

Signed-off-by: bircni <bircni@icloud.com>

internal/services/organizations_test.go

@@ -6,7 +6,9 @@ package services
 import (
 	"context"
 	"errors"
+	"fmt"
 	"net/http"
+	"strings"
 	"testing"
 
 	"gitea.dev/tea/internal/transport"
@@ -194,3 +196,30 @@ func TestOrganizationMembersCheckEachMembership(t *testing.T) {
 		})
 	}
 }
+
+func TestOrganizationPublicMembersReadLaterPages(t *testing.T) {
+	// The first server page holds only concealed members; a public one follows on page 2.
+	client := newTestClient(t, http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		switch {
+		case r.URL.Path == "/api/v1/orgs/acme/public_members" && r.URL.Query().Get("page") == "1":
+			var users []string
+			for i := range 50 {
+				users = append(users, fmt.Sprintf(`{"id":%d,"login":"hidden%d"}`, i+10, i))
+			}
+			w.Header().Set("Link", `<http://x/api/v1/orgs/acme/public_members?page=2>; rel="next"`)
+			_, _ = w.Write([]byte("[" + strings.Join(users, ",") + "]"))
+		case r.URL.Path == "/api/v1/orgs/acme/public_members":
+			_, _ = w.Write([]byte(`[{"id":1,"login":"alice"}]`))
+		case r.URL.Path == "/api/v1/orgs/acme/public_members/alice":
+			w.WriteHeader(http.StatusNoContent)
+		case strings.HasPrefix(r.URL.Path, "/api/v1/orgs/acme/public_members/hidden"):
+			w.WriteHeader(http.StatusNotFound)
+		default:
+			t.Errorf("unexpected request %s %s", r.Method, r.URL.Path)
+		}
+	}))
+	members, err := (Organizations{Client: client}).Members(context.Background(), "acme", MemberListOptions{Public: true, Visibility: true, Limit: 1, Page: 1})
+	require.NoError(t, err)
+	require.Equal(t, []OrganizationMember{{ID: 1, Username: "alice", Visibility: MembershipPublic}}, members.Items)
+	require.False(t, members.More)
+}