[v1.17.0] API cannot use _csrf token get information

[tyroneyeh]

Description

Show The target couldn't be found. or token is required
How use _csrf token to API get data?

API URL: /api/v1/repos/{username}/{reponame}/issues this API in mustEnableIssuesOrPulls function show The target couldn't be found.

API URL: /api/v1/notifications this API show token is required

Gitea Version

1.17.0

Can you reproduce the bug on the Gitea demo site?

Yes

Log Gist

No response

Screenshots

No response

Git Version

No response

Operating System

No response

How are you running Gitea?

systemd

Database

PostgreSQL

[lunny]

From v1.17, web requests are splitter from API/v1. API will not need csrf token. You could just use access token to do that.

[tyroneyeh]

Is it possible to use the session that the original browser is logged in to access the API data?, using AJAX