-
-
Notifications
You must be signed in to change notification settings - Fork 6.2k
Fix http auth header parsing #34936
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix http auth header parsing #34936
Conversation
9ad13dd to
c30c9c3
Compare
c30c9c3 to
7559a08
Compare
7559a08 to
b38e25b
Compare
services/lfs/server.go
Outdated
| fallthrough | ||
| case "token": | ||
| return handleLFSToken(ctx, tokenSHA, target, mode) | ||
| token, ok := httpauth.ParseAuthorizationHeaderBearerToken(authorization) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
ref:The Git LFS API uses HTTP Basic Authentication to authorize requests.
I'm not sure, would there be any other issues with us using token?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
That "basic" is not this "basic"
* giteaofficial/main: Fix http auth header parsing (go-gitea#34936) Don't send trigger for a pending review's comment create/update/delete (go-gitea#34928) Support getting last commit message using contents-ext API (go-gitea#34904) [skip ci] Updated translations via Crowdin Exclude devtest.ts from tailwindcss (go-gitea#34935)
Using
strings.EqualFoldis wrong in many cases.