You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
gitea/services/auth
Giteabot d2efd2bf73
Require repo scope for PATs for private repos and basic authentication (#24362) (#24364)
Backport #24362 by @jolheiser

> The scoped token PR just checked all API routes but in fact, some web
routes like `LFS`, git `HTTP`, container, and attachments supports basic
auth. This PR added scoped token check for them.

Signed-off-by: jolheiser <john.olheiser@gmail.com>
Co-authored-by: John Olheiser <john.olheiser@gmail.com>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2 years ago
..
source Fix accidental overwriting of LDAP team memberships (#24050) (#24065) 2 years ago
auth.go Implement FSFE REUSE for golang files (#21840) 2 years ago
auth_test.go Implement FSFE REUSE for golang files (#21840) 2 years ago
basic.go Require repo scope for PATs for private repos and basic authentication (#24362) (#24364) 2 years ago
group.go refactor auth interface to return error when verify failure (#22119) 2 years ago
httpsign.go refactor auth interface to return error when verify failure (#22119) 2 years ago
interface.go refactor auth interface to return error when verify failure (#22119) 2 years ago
middleware.go Map OIDC groups to Orgs/Teams (#21441) 2 years ago
oauth2.go Implement actions (#21937) 2 years ago
reverseproxy.go Add context cache as a request level cache (#22294) 2 years ago
session.go refactor auth interface to return error when verify failure (#22119) 2 years ago
signin.go Implement FSFE REUSE for golang files (#21840) 2 years ago
source.go Implement FSFE REUSE for golang files (#21840) 2 years ago
sspi_windows.go refactor auth interface to return error when verify failure (#22119) 2 years ago
sync.go Implement FSFE REUSE for golang files (#21840) 2 years ago