You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Lunny Xiao 8cd6be1723 Remove ReverseProxy authentication from the API (#22219) (#22252) ... backport #22219 Since we changed the /api/v1/ routes to disallow session authentication we also removed their reliance on CSRF. However, we left the ReverseProxy authentication here - but this means that POSTs to the API are no longer protected by CSRF. Now, ReverseProxy authentication is a kind of session authentication, and is therefore inconsistent with the removal of session from the API. This PR proposes that we simply remove the ReverseProxy authentication from the API and therefore users of the API must explicitly use tokens or basic authentication. Replace #22077 Close #22221 Close #22077 Signed-off-by: Andrew Thornton <art27@cantab.net> Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: zeripath <art27@cantab.net>		2 years ago
..
admin	Move almost all functions' parameter db.Engine to context.Context (#19748)	3 years ago
misc	Move issues related files into models/issues (#19931)	2 years ago
notify	Move issues related files into models/issues (#19931)	2 years ago
org	Fix owners cannot create organization repos bug (#20841) (#20854)	2 years ago
packages	Hide private repositories in packages (#19584)	3 years ago
repo	Use complete SHA to create and query commit status (#22244) (#22258)	2 years ago
settings	Make mirror feature more configurable (#16957)	3 years ago
swagger	Add API to query collaborators permission for a repository (#18761)	3 years ago
user	Use Go 1.19 fmt for Gitea 1.17, sync emoji data (#21239)	2 years ago
utils	Use complete SHA to create and query commit status (#22244) (#22258)	2 years ago
api.go	Remove ReverseProxy authentication from the API (#22219) (#22252)	2 years ago
auth.go	Remove legacy `+build:` constraint (#19582)	3 years ago
auth_windows.go	Let web and API routes have different auth methods group (#19168)	3 years ago