Gusted da766f1e19 fix: consider scopes for OAuth2 token via basic login ... There are two ways to use a OAuth2 token: Via the Authorization header as a Bearer token. Via the Authorization header as a Basic login. For the former the scope was correctly passed through, for the latter it was not and would mean no scope was checked if you used the token via this way.		2026-03-06 11:21:07 -07:00
..
source	fix: portable error reporting for PAM (#11296)	2026-02-16 05:57:01 +01:00
additional_scopes_test.go	tests additional grant scopes	2024-08-09 14:58:15 +02:00
auth.go	feat: replace cross origin protection (#9830)	2025-10-29 22:43:22 +01:00
auth_test.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
basic.go	fix: consider scopes for OAuth2 token via basic login	2026-03-06 11:21:07 -07:00
group.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
httpsign.go	chore(cleanup): replaces unnecessary calls to formatting functions by non-formatting equivalents (#7994)	2025-05-29 17:34:29 +02:00
interface.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
main_test.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
oauth2.go	feat: add APIContext.Reducer computed from access token	2026-02-27 17:17:29 +01:00
oauth2_test.go	feat: add OIDC workload identity federation support (#10481)	2026-01-15 03:39:00 +01:00
reverseproxy.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
reverseproxy_test.go	test: introduce TruncateBeansCascade test helper to support data cleanup of foreign-key referenced tables (#9684)	2025-10-15 20:26:41 +02:00
session.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
signin.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
source.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
sync.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00