- 
          
- 
                Notifications
    You must be signed in to change notification settings 
- Fork 6.2k
Fix http auth header parsing #34936
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix http auth header parsing #34936
Conversation
9ad13dd    to
    c30c9c3      
    Compare
  
    c30c9c3    to
    7559a08      
    Compare
  
    7559a08    to
    b38e25b      
    Compare
  
            
          
                services/lfs/server.go
              
                Outdated
          
        
      | fallthrough | ||
| case "token": | ||
| return handleLFSToken(ctx, tokenSHA, target, mode) | ||
| token, ok := httpauth.ParseAuthorizationHeaderBearerToken(authorization) | 
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
ref:The Git LFS API uses HTTP Basic Authentication to authorize requests.
I'm not sure, would there be any other issues with us using token?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
That "basic" is not this "basic"
* giteaofficial/main: Fix http auth header parsing (go-gitea#34936) Don't send trigger for a pending review's comment create/update/delete (go-gitea#34928) Support getting last commit message using contents-ext API (go-gitea#34904) [skip ci] Updated translations via Crowdin Exclude devtest.ts from tailwindcss (go-gitea#34935)
Using
strings.EqualFoldis wrong in many cases.