mirror of
1
Fork 0
forgejo/routers
M Hickford afebbf29a9
Require authentication for OAuth token refresh (#21421)
According to the OAuth spec
https://datatracker.ietf.org/doc/html/rfc6749#section-6 when "Refreshing
an Access Token"

> The authorization server MUST ... require client authentication for
confidential clients


Fixes #21418

Co-authored-by: Gusted <williamzijl7@hotmail.com>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2022-10-23 13:28:46 +08:00
..
api Add link to user profile in markdown mention only if user exists (#21533) 2022-10-23 01:15:52 +08:00
common Rework raw file http header logic (#20484) 2022-07-29 17:26:55 +02:00
install Fix read system configuration bug when installing (#21489) 2022-10-18 23:16:58 +08:00
private log real ip of requests from ssh (#21216) 2022-10-11 16:57:37 +08:00
utils refactor webhook *NewPost (#20729) 2022-08-11 17:48:23 +02:00
web Require authentication for OAuth token refresh (#21421) 2022-10-23 13:28:46 +08:00
init.go Add link to user profile in markdown mention only if user exists (#21533) 2022-10-23 01:15:52 +08:00