forgejo/modules/context
Giteabot d2efd2bf73
Require repo scope for PATs for private repos and basic authentication (#24362) (#24364)
Backport #24362 by @jolheiser

> The scoped token PR just checked all API routes but in fact, some web
routes like `LFS`, git `HTTP`, container, and attachments supports basic
auth. This PR added scoped token check for them.

Signed-off-by: jolheiser <john.olheiser@gmail.com>
Co-authored-by: John Olheiser <john.olheiser@gmail.com>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2023-04-26 20:57:51 -04:00
..
access_log.go
api.go Fix wrong error info in RepoRefForAPI (#24344) (#24351) 2023-04-26 11:07:51 +02:00
api_org.go
api_test.go
auth.go
captcha.go
context.go Improve template error reporting (#23396) (#23600) 2023-03-20 17:53:45 -04:00
csrf.go
form.go
org.go
package.go
pagination.go
permission.go Require repo scope for PATs for private repos and basic authentication (#24362) (#24364) 2023-04-26 20:57:51 -04:00
private.go
repo.go Ensure RSS icon is present on all repo tabs (#23904) (#23973) 2023-04-07 14:55:30 +02:00
response.go
utils.go
xsrf.go
xsrf_test.go