You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Shivaram Lingamneni 2f1cb1d289 fix OIDC introspection authentication (#31632) ... See discussion on #31561 for some background. The introspect endpoint was using the OIDC token itself for authentication. This fixes it to use basic authentication with the client ID and secret instead: * Applications with a valid client ID and secret should be able to successfully introspect an invalid token, receiving a 200 response with JSON data that indicates the token is invalid * Requests with an invalid client ID and secret should not be able to introspect, even if the token itself is valid Unlike #31561 (which just future-proofed the current behavior against future changes to `DISABLE_QUERY_AUTH_TOKEN`), this is a potential compatibility break (some introspection requests without valid client IDs that would previously succeed will now fail). Affected deployments must begin sending a valid HTTP basic authentication header with their introspection requests, with the username set to a valid client ID and the password set to the corresponding client secret.		7 months ago
..
actions	Resolve lint for unused parameter and unnecessary type arguments (#30750)	10 months ago
activitypub	Upgrade to golangci-lint@v1.55.0 (#27756)	1 year ago
analyze	Rename code_langauge.go to code_language.go (#26377)	2 years ago
assetfs	Use `Set[Type]` instead of `map[Type]bool/struct{}`. (#26804)	2 years ago
auth	Add Passkey login support (#31504)	8 months ago
avatar	Use `crypto/sha256` (#29386)	1 year ago
badge	Implement actions badge svgs (#28102)	1 year ago
base	fix OIDC introspection authentication (#31632)	7 months ago
cache	Add cache test for admins (#31265)	8 months ago
charset	Render embedded code preview by permlink in markdown (#30234)	11 months ago
container	Allow disabling authentication related user features (#31535)	8 months ago
csv	Render embedded code preview by permlink in markdown (#30234)	11 months ago
dump	Refactor "dump" sub-command (#30240)	11 months ago
emoji	Update emoji set to Unicode 15 (#25595)	2 years ago
eventsource	Final round of `db.DefaultContext` refactor (#27587)	1 year ago
generate	Refactor JWT secret generating & decoding code (#29172)	1 year ago
git	Fix slow patch checking with commits that add or remove many files (#31548)	8 months ago
gitgraph	More `db.DefaultContext` refactor (#27265)	1 year ago
gitrepo	Use repo as of renderctx's member rather than a repoPath on metas (#29222)	9 months ago
graceful	Remove unused error in graceful manager (#29871)	11 months ago
hcaptcha	Consume hcaptcha and pwn deps (#22610)	2 years ago
highlight	Add option to disable ambiguous unicode characters detection (#28454)	1 year ago
hostmatcher	Support allowed hosts for webhook to work with proxy (#27655)	1 year ago
html	Refactor backend SVG package and add tests (#26335)	2 years ago
httpcache	Also match weakly validated ETags (#28957)	1 year ago
httplib	Fix duplicate sub-path for avatars (#31365)	9 months ago
indexer	Allow searching issues by ID (#31479)	7 months ago
issue/template	Issue Templates: add option to have dropdown printed list (#31577)	8 months ago
json	Replace `interface{}` with `any` (#25686)	2 years ago
label	Make label templates have consistent behavior and priority (#23749)	2 years ago
lfs	Support legacy _links LFS batch responses (#31513)	8 months ago
log	Add some tests to clarify the "must-change-password" behavior (#30693)	10 months ago
markup	Fix markdown preview $$ support (#31514)	8 months ago
mcaptcha	Implement FSFE REUSE for golang files (#21840)	2 years ago
metrics	Rename project board -> column to make the UI less confusing (#30170)	9 months ago
migration	Refactor locale&string&template related code (#29165)	1 year ago
nosql	Update tool dependencies, lock govulncheck and actionlint (#25655)	2 years ago
optional	Resolve lint for unused parameter and unnecessary type arguments (#30750)	10 months ago
options	Use a general approach to access custom/static/builtin assets (#24022)	2 years ago
packages	Extract and display readme and comments for Composer packages (#30927)	9 months ago
paginator	Use more specific test methods (#24265)	2 years ago
pprof	Implement FSFE REUSE for golang files (#21840)	2 years ago
private	Move database operations of merging a pull request to post receive hook and add a transaction (#30805)	10 months ago
process	Update misspell to 0.5.1 and add `misspellings.csv` (#30573)	10 months ago
proxy	Use proxy for pull mirror (#22771)	2 years ago
proxyprotocol	Implement FSFE REUSE for golang files (#21840)	2 years ago
public	Refactor CORS handler (#28587)	1 year ago
queue	Fix queue test (#30646)	10 months ago
recaptcha	Implement FSFE REUSE for golang files (#21840)	2 years ago
references	Refactor to use UnsafeStringToBytes (#31358)	9 months ago
regexplru	Upgrade go dependencies (#25819)	2 years ago
repository	Fix adopt repository has empty object name in database (#31333)	9 months ago
secret	Use `crypto/sha256` (#29386)	1 year ago
session	Improve oauth2 client "preferred username field" logic and the error handling (#30622)	10 months ago
setting	Add option to change mail from user display name (#31528)	8 months ago
sitemap	Fix sitemap (#22272)	2 years ago
ssh	Remove SSH workaround (#27893)	1 year ago
storage	Enable `unparam` linter (#31277)	9 months ago
structs	add skip secondary authorization option for public oauth2 clients (#31454)	7 months ago
svg	Refactor markdown attention render (#29984)	11 months ago
sync	Implement FSFE REUSE for golang files (#21840)	2 years ago
system	Refactor to use UnsafeStringToBytes (#31358)	9 months ago
templates	Refactor names (#31405)	8 months ago
test	Remove sub-path from container registry realm (#31293)	9 months ago
testlogger	Replace `interface{}` with `any` (#25686)	2 years ago
timeutil	Refactor "dump" sub-command (#30240)	11 months ago
translation	Render embedded code preview by permlink in markdown (#30234)	11 months ago
turnstile	Add new captcha: cloudflare turnstile (#22369)	2 years ago
typesniffer	Detect ogg mime-type as audio or video (#26494)	2 years ago
updatechecker	Replace more db.DefaultContext (#27628)	1 year ago
uri	Implement FSFE REUSE for golang files (#21840)	2 years ago
user	Implement FSFE REUSE for golang files (#21840)	2 years ago
util	Refactor to use UnsafeStringToBytes (#31358)	9 months ago
validation	Check blocklist for emails when adding them to account (#26812)	2 years ago
web	Refactor names (#31405)	8 months ago
webhook	Fix schedule tasks bugs (#28691)	1 year ago