You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Lunny Xiao 9b4da56963 Remove ReverseProxy authentication from the API (#22219) (#22251) ... backport from #22219 Since we changed the /api/v1/ routes to disallow session authentication we also removed their reliance on CSRF. However, we left the ReverseProxy authentication here - but this means that POSTs to the API are no longer protected by CSRF. Now, ReverseProxy authentication is a kind of session authentication, and is therefore inconsistent with the removal of session from the API. This PR proposes that we simply remove the ReverseProxy authentication from the API and therefore users of the API must explicitly use tokens or basic authentication. Replace #22077 Close #22221 Close #22077 Signed-off-by: Andrew Thornton <art27@cantab.net> Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: zeripath <art27@cantab.net>		2 years ago
..
api	Remove ReverseProxy authentication from the API (#22219) (#22251)	2 years ago
common	Add support for HEAD requests in Maven registry (#21834) (#21929)	2 years ago
install	Fix token generation when using INTERNAL_TOKEN_URI (#21669) (#21670)	2 years ago
private	Refactor git command arguments and make all arguments to be safe to be used (#21535)	2 years ago
utils	refactor webhook *NewPost (#20729)	2 years ago
web	Ensure that plain files are rendered correctly even when containing ambiguous characters (#22017) (#22160)	2 years ago
init.go	Sync git hooks when config file path changed (#21619) (#21626)	2 years ago