-
-
Notifications
You must be signed in to change notification settings - Fork 5.9k
Fix http auth header parsing #34936
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix http auth header parsing #34936
Conversation
9ad13dd
to
c30c9c3
Compare
c30c9c3
to
7559a08
Compare
7559a08
to
b38e25b
Compare
services/lfs/server.go
Outdated
fallthrough | ||
case "token": | ||
return handleLFSToken(ctx, tokenSHA, target, mode) | ||
token, ok := httpauth.ParseAuthorizationHeaderBearerToken(authorization) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
ref:The Git LFS API uses HTTP Basic Authentication to authorize requests.
I'm not sure, would there be any other issues with us using token?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
That "basic" is not this "basic"
* giteaofficial/main: Fix http auth header parsing (go-gitea#34936) Don't send trigger for a pending review's comment create/update/delete (go-gitea#34928) Support getting last commit message using contents-ext API (go-gitea#34904) [skip ci] Updated translations via Crowdin Exclude devtest.ts from tailwindcss (go-gitea#34935)
Using
strings.EqualFold
is wrong in many cases.