public/gitea
1
0
Fork 0
mirror of https://github.com/go-gitea/gitea.git synced 2025-11-03 08:02:36 +09:00
Code Issues Packages Projects Releases Wiki Activity

API calls authorized with HTTP header

Browse Source 
This mod allows API calls to be authorized with HTTP header
when ENABLE_REVERSE_PROXY_AUTHENTICATION is enabled. Without
it user authenticated by reverse proxy is able to access
gitea UI but not API which is inconsistent.

Author-Change-Id: IB#1107572
This commit is contained in:
Pawel Boguslawski
2021-03-18 15:37:22 +01:00
parent 0a23079485
commit dc952c0632
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
routers/api/v1/api.go
View File

@@ -197,6 +197,10 @@ func reqToken() func(ctx *context.APIContext) {
return return
} }
if ctx.IsSigned { if ctx.IsSigned {
// Don't require token if already authenticated by reverse proxy.
if setting.Service.EnableReverseProxyAuth {
return
}
ctx.RequireCSRF() ctx.RequireCSRF()
return return
} }