mirror of
1
Fork 0
forgejo/routers/web
John Olheiser 5e36024105
Require repo scope for PATs for private repos and basic authentication (#24362)
> The scoped token PR just checked all API routes but in fact, some web
routes like `LFS`, git `HTTP`, container, and attachments supports basic
auth. This PR added scoped token check for them.

---------

Signed-off-by: jolheiser <john.olheiser@gmail.com>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2023-04-26 19:24:03 -05:00
..
admin Use auto-updating, natively hoverable, localized time elements (#23988) 2023-04-11 01:01:20 +02:00
auth Respect the REGISTER_MANUAL_CONFIRM setting when registering via OIDC (#24035) 2023-04-25 14:40:48 +08:00
devtest Remove untranslatable `on_date` key (#24106) 2023-04-15 13:01:54 +02:00
events Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
explore Add ONLY_SHOW_RELEVANT_REPOS back, fix explore page bug, make code more strict (#23766) 2023-03-29 08:41:45 -05:00
feed Improve RSS (#24335) 2023-04-25 22:53:44 -04:00
healthcheck Refactor `setting.Database.UseXXX` to methods (#23354) 2023-03-07 18:51:06 +08:00
misc Introduce GitHub markdown editor, keep EasyMDE as fallback (#23876) 2023-04-03 18:06:57 +08:00
org Fix 404 error when leaving the last private org team (#24322) 2023-04-26 12:27:46 -04:00
repo Require repo scope for PATs for private repos and basic authentication (#24362) 2023-04-26 19:24:03 -05:00
shared Only delete secrets belonging to its owner (#24284) 2023-04-23 21:35:14 +08:00
user Only delete secrets belonging to its owner (#24284) 2023-04-23 21:35:14 +08:00
auth.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
auth_windows.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
base.go Improve Wiki TOC (#24137) 2023-04-17 15:05:19 -04:00
goget.go refactor some functions to support ctx as first parameter (#21878) 2022-12-03 10:48:26 +08:00
home.go Refactor cookie (#24107) 2023-04-13 15:45:33 -04:00
metrics.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
nodeinfo.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
swagger_json.go Group template helper functions, remove `Printf`, improve template error messages (#23982) 2023-04-08 21:15:22 +08:00
web.go Improve RSS (#24335) 2023-04-25 22:53:44 -04:00
webfinger.go Use User.ID instead of User.Name in ActivityPub API for Person IRI (#23823) 2023-04-04 10:08:23 +08:00