fixes

src/api/mod.rs

@@ -81,6 +81,8 @@ pub struct PublishRequest {
     access_token: Option<String>,
     #[serde(default)]
     allow_task_updates: bool,
+    #[serde(default)]
+    unprotect_page: bool,
 }
 
 #[derive(Debug, Deserialize)]
@@ -150,6 +152,7 @@ pub struct NoteInfo {
     protected: bool,
     note_protected: bool,
     allow_public_task_updates: bool,
+    public_page_unprotected: bool,
     created_at: String,
     updated_at: String,
     can_delete_files: bool,
@@ -445,6 +448,7 @@ pub async fn note_info(
         protected: workspace.password_hash.is_some(),
         note_protected: note.protected,
         allow_public_task_updates: db::note_public_task_updates(&state.db, note.id).await?,
+        public_page_unprotected: db::note_public_page_unprotected(&state.db, note.id).await?,
         created_at: db::normalize_timestamp(&note.created_at),
         updated_at: db::normalize_timestamp(&note.updated_at),
         can_delete_files: {
@@ -651,7 +655,7 @@ async fn ensure_private_resource_access(
     if verify_resource_access_token(state, kind, slug, token).await? {
         return Ok(());
     }
-    Err(ApiError::forbidden("This resource is private."))
+    Err(ApiError::not_found_workspace())
 }
 
 pub async fn authorized_workspace(
@@ -667,7 +671,7 @@ pub async fn authorized_workspace(
     let token_level =
         combined_token_access_level(state, "workspace", slug, access_token, bearer).await?;
     if workspace.is_private != 0 && token_level == AccessLevel::None {
-        return Err(ApiError::forbidden("This workspace is private."));
+        return Err(ApiError::not_found_workspace());
     }
     if workspace.password_hash.is_some()
         && !db::verify_workspace_password(&workspace, password)