John Olheiser 5e36024105

Require repo scope for PATs for private repos and basic authentication (#24362) ...

> The scoped token PR just checked all API routes but in fact, some web
routes like `LFS`, git `HTTP`, container, and attachments supports basic
auth. This PR added scoped token check for them.

---------

Signed-off-by: jolheiser <john.olheiser@gmail.com>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>

2023-04-26 19:24:03 -05:00

..

actions

show workflow config error on file view also (#24267)

2023-04-22 22:16:54 -04:00

activitypub

Add Chef package registry (#22554)

2023-02-06 09:49:21 +08:00

analyze

…

assetfs

Use a general approach to access custom/static/builtin assets (#24022)

2023-04-12 18:16:45 +08:00

auth

Use a general approach to access custom/static/builtin assets (#24022)

2023-04-12 18:16:45 +08:00

avatar

Allow webp images as avatars (#24248)

2023-04-21 13:15:49 -04:00

base

Use a general Eval function for expressions in templates. (#23927)

2023-04-07 21:25:49 +08:00

cache

Update redis library to support redis v7 (#24114)

2023-04-13 18:41:04 -04:00

charset

Update go tool dependencies, restructure lint targets (#24239)

2023-04-22 14:53:00 -04:00

container

…

context

Require repo scope for PATs for private repos and basic authentication (#24362)

2023-04-26 19:24:03 -05:00

csv

Refactor locale number (#24134)

2023-04-17 11:37:23 +08:00

doctor

Enable forbidigo linter (#24278)

2023-04-24 05:50:58 -04:00

emoji

…

eventsource

…

generate

…

git

Use more specific test methods (#24265)

2023-04-22 17:56:27 -04:00

gitgraph

Add context cache as a request level cache (#22294)

2023-02-15 21:37:34 +08:00

graceful

Remove most path-based golangci exclusions (#24214)

2023-04-19 22:08:01 -04:00

hcaptcha

Consume hcaptcha and pwn deps (#22610)

2023-01-29 09:49:51 -06:00

highlight

test_env: hardcode major go version in use (#23464)

2023-03-14 16:09:01 -04:00

hostmatcher

…

html

…

httpcache

Set X-Gitea-Debug header once (#23361)

2023-03-08 15:40:04 -05:00

httplib

Refactor internal API for git commands, use meaningful messages instead of "Internal Server Error" (#23687)

2023-03-29 14:32:26 +08:00

indexer

Refactor config provider (#24245)

2023-04-25 23:06:39 +08:00

issue/template

Allow issue templates to not render title (#22589)

2023-01-26 22:45:49 -06:00

json

…

label

Make label templates have consistent behavior and priority (#23749)

2023-04-10 16:44:02 +08:00

lfs

Use more specific test methods (#24265)

2023-04-22 17:56:27 -04:00

log

Enable forbidigo linter (#24278)

2023-04-24 05:50:58 -04:00

markup

Use more specific test methods (#24265)

2023-04-22 17:56:27 -04:00

mcaptcha

…

metrics

include build info in Prometheus metrics (#22819)

2023-02-08 19:54:01 +02:00

migration

Scoped labels (#22585)

2023-02-18 21:17:39 +02:00

mirror

…

nosql

Update redis library to support redis v7 (#24114)

2023-04-13 18:41:04 -04:00

notification

Implement actions (#21937)

2023-01-31 09:45:19 +08:00

options

Use a general approach to access custom/static/builtin assets (#24022)

2023-04-12 18:16:45 +08:00

packages

Use more specific test methods (#24265)

2023-04-22 17:56:27 -04:00

paginator

Use more specific test methods (#24265)

2023-04-22 17:56:27 -04:00

pprof

…

private

Fix incorrect internal response type (#24173)

2023-04-17 23:10:40 -04:00

process

Improve trace logging for pulls and processes (#22633)

2023-02-03 18:11:48 -05:00

proxy

Use proxy for pull mirror (#22771)

2023-02-11 08:39:50 +08:00

proxyprotocol

…

public

Use a general approach to access custom/static/builtin assets (#24022)

2023-04-12 18:16:45 +08:00

queue

Enable forbidigo linter (#24278)

2023-04-24 05:50:58 -04:00

recaptcha

…

references

Use correct captured group range when parsing cross-reference (#22672)

2023-01-31 10:08:05 +01:00

regexplru

…

repository

Use a general approach to access custom/static/builtin assets (#24022)

2023-04-12 18:16:45 +08:00

secret

Use more specific test methods (#24265)

2023-04-22 17:56:27 -04:00

session

Update redis library to support redis v7 (#24114)

2023-04-13 18:41:04 -04:00

setting

Add .livemd as a markdown extension (#22730)

2023-04-26 11:22:54 -04:00

sitemap

…

ssh

…

storage

Use more specific test methods (#24265)

2023-04-22 17:56:27 -04:00

structs

Display when a repo was archived (#22664)

2023-04-26 10:46:26 -04:00

svg

Use a general approach to access custom/static/builtin assets (#24022)

2023-04-12 18:16:45 +08:00

sync

…

system

…

templates

Remove unnecessary helper function DateFmtLong (#24343)

2023-04-26 02:52:50 -04:00

test

Use more specific test methods (#24265)

2023-04-22 17:56:27 -04:00

timeutil

Fix template function DateTime (#24317)

2023-04-25 15:48:30 -04:00

translation

Use more specific test methods (#24265)

2023-04-22 17:56:27 -04:00

turnstile

Add new captcha: cloudflare turnstile (#22369)

2023-02-05 15:29:03 +08:00

typesniffer

Do not recognize text files as audio (#23355)

2023-03-07 22:40:41 -05:00

updatechecker

…

upload

…

uri

…

user

…

util

Use more specific test methods (#24265)

2023-04-22 17:56:27 -04:00

validation

Map OIDC groups to Orgs/Teams (#21441)

2023-02-08 14:44:42 +08:00

web

Enable forbidigo linter (#24278)

2023-04-24 05:50:58 -04:00

webhook

…