mirror of
1
Fork 0
forgejo/routers/web
Zettat123 d841e95191
Return `access_denied` error when an OAuth2 request is denied (#30974)
According to [RFC
6749](https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.2.1),
when the resource owner or authorization server denied an request, an
`access_denied` error should be returned. But currently in this case
Gitea does not return any error.

For example, if the user clicks "Cancel" here, an `access_denied` error
should be returned.

<img width="360px"
src="https://github.com/go-gitea/gitea/assets/15528715/be31c09b-4c0a-4701-b7a4-f54b8fe3a6c5"
/>

(cherry picked from commit f1d9f18d96050d89a4085c961f572f07b1e653d1)
(cherry picked from commit 886a675f62)
2024-06-05 17:19:22 +02:00
..
admin Add missed return after `ctx.ServerError` (#31130) (#31133) 2024-05-31 14:35:19 +02:00
auth Return `access_denied` error when an OAuth2 request is denied (#30974) 2024-06-05 17:19:22 +02:00
devtest Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
events Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
explore Repository explore alphabetically order respect owner name (#30882) 2024-05-14 15:31:36 +02:00
feed Teach activities.GetFeeds() how to avoid returning duplicates 2024-05-09 18:37:30 +00:00
healthcheck Add health-check test 2024-04-06 08:44:23 +00:00
misc Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
org Add missed return after `ctx.ServerError` (#31130) (#31133) 2024-05-31 14:35:19 +02:00
repo Add missed return after `ctx.ServerError` (#31130) (#31133) 2024-05-31 14:35:19 +02:00
shared Fix various problems around projects board view (#30696) 2024-05-14 15:51:15 +02:00
user Merge pull request '[v1.22/gitea] week 16 cherry pick to v7.0' (#3235) from earl-warren/forgejo:wip-v7.0-gitea-cherry-pick into v7.0/forgejo 2024-04-16 09:31:46 +00:00
base.go Fix panic in storageHandler (#27446) 2023-10-06 13:23:14 +00:00
githttp.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
goget.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
home.go migrate some more "OptionalBool" to "Option[bool]" (#29479) 2024-03-06 12:10:44 +08:00
metrics.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
nodeinfo.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
swagger_json.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
web.go Move reverproxyauth before session so the header will not be ignored even if user has login (#27821) (#30948) 2024-05-14 16:17:23 +02:00
webfinger.go fix: respond with JSON Resource Descriptor Content-Type per RFC7033 2024-04-02 09:41:57 +00:00