John Olheiser 5e36024105 Require repo scope for PATs for private repos and basic authentication (#24362) ...

> The scoped token PR just checked all API routes but in fact, some web
routes like `LFS`, git `HTTP`, container, and attachments supports basic
auth. This PR added scoped token check for them.

---------

Signed-off-by: jolheiser <john.olheiser@gmail.com>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>

2023-04-26 19:24:03 -05:00

3.9 KiB

Raw Blame History

View Raw