gitea

mirror of https://github.com/go-gitea/gitea.git synced 2026-10-01 20:59:45 +09:00

Files

T

Harsh Sharma fc68608603 fix(oauth2): allow users to approve scope changes (#38942 )

Lets users approve an OAuth2 scope change on an existing grant instead
of failing with `a grant exists with different scope`.

- Approving a different scope updates the existing grant. Issued tokens
follow immediately, since their scope is read from the grant.
- Confidential and trusted apps show the consent page when the scope set
changes, instead of silently reusing the old grant.
- An omitted `scope` reuses the existing grant's scope, like GitHub.
- The consent page lists newly added scopes.

Fixes: https://github.com/go-gitea/gitea/issues/38940
Co-authored-by: bircni <bircni@icloud.com>
Co-authored-by: Giteabot <teabot@gitea.io>
Co-authored-by: silverwind <me@silverwind.io>

2026-10-01 09:08:33 +02:00

access_token_scope_test.go

fix: various security fixes (#38406 )

2026-07-12 17:14:09 +00:00

access_token_scope.go

fix: various security fixes (#38406 )

2026-07-12 17:14:09 +00:00

access_token_test.go

feat(user): Personal access tokens can be regenerated (#38907 )

2026-08-17 18:17:16 +00:00

access_token.go

feat: Add audit logging (#38189 )