You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

M Hickford 14bc4d79c1 Parse OAuth Authorization header when request omits client secret (#21351) (#21374) ... Backport #21351 This fixes error "unauthorized_client: invalid client secret" when client includes secret in Authorization header rather than request body. OAuth spec permits both: https://www.rfc-editor.org/rfc/rfc6749#section-2.3.1 Clients in possession of a client password MAY use the HTTP Basic authentication scheme ... Alternatively, the authorization server MAY support including the client credentials in the request-body Sanity validation that client id and client secret in request are consistent with Authorization header. Improve error descriptions. Error codes remain the same. Co-authored-by: wxiaoguang <wxiaoguang@gmail.com> Co-authored-by: zeripath <art27@cantab.net>		2 years ago
..
api	Use Go 1.19 fmt for Gitea 1.17, sync emoji data (#21239)	2 years ago
common	Rework raw file http header logic (#20484) (#20542)	2 years ago
install	Add Cache-Control header to html and api responses, add no-transform (#20432) (#20459)	2 years ago
private	Add migrate repo archiver and packages storage support on command line (#20757) (#20806)	2 years ago
utils	A better go code formatter, and now `make fmt` can run in Windows (#17684)	3 years ago
web	Parse OAuth Authorization header when request omits client secret (#21351) (#21374)	2 years ago
init.go	Initialize cron last (#20373) (#20384)	2 years ago