4 people d2efd2bf73 Require repo scope for PATs for private repos and basic authentication (#24362) (#24364) ...

Backport #24362 by @jolheiser

> The scoped token PR just checked all API routes but in fact, some web
routes like `LFS`, git `HTTP`, container, and attachments supports basic
auth. This PR added scoped token check for them.

Signed-off-by: jolheiser <[email protected]>
Co-authored-by: John Olheiser <[email protected]>
Co-authored-by: Lunny Xiao <[email protected]>

2023-04-26 20:57:51 -04:00

..

actions

Handle canceled workflow as a warning instead of a fail (#24282) (#24292)

2023-04-23 15:44:45 -04:00

agit

Rename almost all Ctx functions (#22071)

2022-12-10 10:46:31 +08:00

asymkey

Add context cache as a request level cache (#22294)

2023-02-15 21:37:34 +08:00

attachment

Preserve file size when creating attachments (#23406) (#23426)

2023-03-12 12:45:39 +01:00

auth

Require repo scope for PATs for private repos and basic authentication (#24362) (#24364)

2023-04-26 20:57:51 -04:00

automerge

Add force_merge to merge request and fix checking mergable (#23010)

2023-02-21 08:42:07 -06:00

context

Use User.ID instead of User.Name in ActivityPub API for Person IRI (#23823) (#23905)

2023-04-03 22:41:57 -05:00

convert

Fix SyncOnCommit always return false in API of push_mirrors (#23088) (#23100)

2023-02-24 14:36:25 +08:00

cron

Add Cargo package registry (#21888)

2023-02-05 18:12:31 +08:00

externalaccount

Implement FSFE REUSE for golang files (#21840)

2022-11-27 18:20:29 +00:00

forms

Title can be empty when creating tag only (#23917) (#23961)

2023-04-07 20:13:57 +08:00

gitdiff

Fix broken code editor diff preview (#23307) (#23320)

2023-03-06 12:05:35 -06:00

issue

Fix issue attachment handling (#24202) (#24221)

2023-04-20 04:21:10 -04:00

lfs

Require repo scope for PATs for private repos and basic authentication (#24362) (#24364)

2023-04-26 20:57:51 -04:00

mailer

Preserve file size when creating attachments (#23406) (#23426)

2023-03-12 12:45:39 +01:00

markup

Implement FSFE REUSE for golang files (#21840)

2022-11-27 18:20:29 +00:00

migrations

Add loading yaml label template files (#22976) (#23232)

2023-03-01 21:57:34 -05:00

mirror

Fill head commit to in payload when notifying push commits for mirroring (#23215) (#23292)

2023-03-04 19:02:50 +01:00

org

Implement FSFE REUSE for golang files (#21840)

2022-11-27 18:20:29 +00:00

packages

Use import of OCI structs (#22765)

2023-02-06 10:07:09 +00:00

pull

[Patch] Fix closed PR also triggers Webhooks and actions (#23782) (#23834)

2023-03-31 14:29:23 +08:00

release

Delete deleted release attachments immediately from storage (#23913) (#23958)

2023-04-06 18:38:34 -04:00

repository

Make label templates have consistent behavior and priority (#23749) (#24071)

2023-04-12 16:05:10 +02:00

task

Implement FSFE REUSE for golang files (#21840)

2022-11-27 18:20:29 +00:00

user

Add context cache as a request level cache (#22294)

2023-02-15 21:37:34 +08:00

webhook

Fix incorrect HookEventType of pull request review comments (#23650) (#23678)

2023-03-24 20:56:15 -04:00

wiki

Fix bug when deleting wiki with no code write permission (#24274) (#24295)

2023-04-23 20:20:45 -04:00