jojo/services/auth
Gusted ba5ffc0e88 fix: consider scopes for OAuth2 token via basic login
There are two ways to use a OAuth2 token:

Via the Authorization header as a Bearer token.
Via the Authorization header as a Basic login.

For the former the scope was correctly passed through, for the latter it
was not and would mean no scope was checked if you used the token via
this way.
2026-03-06 11:20:50 -07:00
..
source [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
additional_scopes_test.go tests additional grant scopes 2024-08-09 14:58:15 +02:00
auth.go [v11.0/forgejo] fix: consistently enforce 2FA on OpenID 2.0 (#9096) 2025-08-30 18:57:11 +02:00
auth_test.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
basic.go fix: consider scopes for OAuth2 token via basic login 2026-03-06 11:20:50 -07:00
group.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
httpsign.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
interface.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
main_test.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
oauth2.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
oauth2_test.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
reverseproxy.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
reverseproxy_test.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
session.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
signin.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
source.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
sync.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00