mirror of https://github.com/go-gitea/gitea.git
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
14bc4d79c1
Backport #21351 This fixes error "unauthorized_client: invalid client secret" when client includes secret in Authorization header rather than request body. OAuth spec permits both: https://www.rfc-editor.org/rfc/rfc6749#section-2.3.1 Clients in possession of a client password MAY use the HTTP Basic authentication scheme ... Alternatively, the authorization server MAY support including the client credentials in the request-body Sanity validation that client id and client secret in request are consistent with Authorization header. Improve error descriptions. Error codes remain the same. Co-authored-by: wxiaoguang <wxiaoguang@gmail.com> Co-authored-by: zeripath <art27@cantab.net> |
2 years ago | |
|---|---|---|
| .. | ||
| admin | 3 years ago | |
| auth | 2 years ago | |
| dev | 3 years ago | |
| events | 3 years ago | |
| explore | 3 years ago | |
| feed | 2 years ago | |
| healthcheck | 3 years ago | |
| misc | 3 years ago | |
| org | 3 years ago | |
| repo | 2 years ago | |
| user | 3 years ago | |
| auth.go | 3 years ago | |
| auth_windows.go | 3 years ago | |
| base.go | 3 years ago | |
| goget.go | 3 years ago | |
| home.go | 3 years ago | |
| metrics.go | 3 years ago | |
| nodeinfo.go | 3 years ago | |
| swagger_json.go | 4 years ago | |
| web.go | 3 years ago | |
| webfinger.go | 3 years ago | |