Giteabot d2efd2bf73 Require repo scope for PATs for private repos and basic authentication (#24362) (#24364) ... Backport #24362 by @jolheiser > The scoped token PR just checked all API routes but in fact, some web routes like `LFS`, git `HTTP`, container, and attachments supports basic auth. This PR added scoped token check for them. Signed-off-by: jolheiser <john.olheiser@gmail.com> Co-authored-by: John Olheiser <john.olheiser@gmail.com> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>		2023-04-26 20:57:51 -04:00
..
admin	Fix 500 error if there is a name conflict when edit authentication source (#23832) (#23852)	2023-03-31 12:53:25 -04:00
auth	Respect the REGISTER_MANUAL_CONFIRM setting when registering via OIDC (#24035) (#24333)	2023-04-25 15:25:08 -04:00
events	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
explore	Add ONLY_SHOW_RELEVANT_REPOS back, fix explore page bug, make code more strict (#23766) (#23791)	2023-03-30 09:09:22 -05:00
feed	User/Org Feed render description as per web (#23887) (#23906)	2023-04-04 00:44:50 -04:00
healthcheck	Refactor `setting.Database.UseXXX` to methods (#23354) (#23356)	2023-03-07 20:11:44 +08:00
misc	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
org	Only delete secrets belonging to its owner (#24284) (#24286)	2023-04-23 16:36:20 +02:00
repo	Require repo scope for PATs for private repos and basic authentication (#24362) (#24364)	2023-04-26 20:57:51 -04:00
shared	Only delete secrets belonging to its owner (#24284) (#24286)	2023-04-23 16:36:20 +02:00
user	Only delete secrets belonging to its owner (#24284) (#24286)	2023-04-23 16:36:20 +02:00
auth.go	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
auth_windows.go	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
base.go	Set `X-Gitea-Debug` header once (#23361) (#23381)	2023-03-09 06:33:05 +08:00
goget.go	refactor some functions to support ctx as first parameter (#21878)	2022-12-03 10:48:26 +08:00
home.go	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
metrics.go	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
nodeinfo.go	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
swagger_json.go	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
web.go	Support "." char as user name for User/Orgs in RSS/ATOM/GPG/KEYS path ... (#23874) (#23878)	2023-04-07 18:10:17 +08:00
webfinger.go	Use User.ID instead of User.Name in ActivityPub API for Person IRI (#23823) (#23905)	2023-04-03 22:41:57 -05:00