Lunny Xiao c9920b7bd0

fix(oauth): restrict introspection to the token's client (#38042) ...

Bind OAuth token introspection responses to the authenticated client.
Return an inactive response when the token grant belongs to a different
OAuth application to avoid leaking token metadata across clients.

Add integration coverage for cross-client introspection attempts against
both access tokens and refresh tokens.

Assisted-by: GPT-5.4

2026-06-28 08:06:33 +00:00

..

e2e

refactor: replace legacy delete-button with link-action (#38143)

2026-06-18 12:02:11 +00:00

fuzz

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

gitea-lfs-meta

…

gitea-repositories-meta

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

integration

fix(oauth): restrict introspection to the token's client (#38042)

2026-06-28 08:06:33 +00:00

testdata/data

…

mssql.ini.tmpl

Refactor integration tests infrastructure (#37462)

2026-04-29 16:37:38 +00:00

mysql.ini.tmpl

Refactor integration tests infrastructure (#37462)

2026-04-29 16:37:38 +00:00

pgsql.ini.tmpl

Refactor integration tests infrastructure (#37462)

2026-04-29 16:37:38 +00:00

sqlite.ini.tmpl

fix: allow git clone of private repos with anonymous code access (#38074)

2026-06-13 12:02:02 +08:00

test_utils.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00