Commit graph

3 commits

Author SHA1 Message Date
harryzcy
cfcbdba1f8
Update the types for ApiTokenScope in context 2022-09-06 23:42:15 -04:00
harryzcy
6c5dd10100
Restrict scope for some APIs 2022-09-06 16:27:04 -04:00
Wim
e528e2b435
Implement http signatures support for the API (#17565)
Fixes #12338

This allows use to talk to the API with our ssh certificate (and/or ssh-agent) without needing to fetch an API key or tokens.
It will just automatically work when users have added their ssh principal in gitea.

This needs client code in tea
Update: also support normal pubkeys

ref: https://tools.ietf.org/html/draft-cavage-http-signatures

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
Co-authored-by: zeripath <art27@cantab.net>
Signed-off-by: Andrew Thornton <art27@cantab.net>
2022-06-05 08:16:14 +01:00