diff options
| author | John Olheiser <john.olheiser@gmail.com> | 2023-04-26 19:24:03 -0500 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-04-26 19:24:03 -0500 |
| commit | 5e360241053f6fcfb7f8b89373cba431adaf44ce (patch) | |
| tree | 8253e76b296a437b3e288e5cc0b70070e9578946 /tests/integration/api_packages_nuget_test.go | |
| parent | 8f57aa014b5642bcd33a6b22492df3c63f03d808 (diff) | |
| download | gitea-5e360241053f6fcfb7f8b89373cba431adaf44ce.tar.gz gitea-5e360241053f6fcfb7f8b89373cba431adaf44ce.zip | |
Require repo scope for PATs for private repos and basic authentication (#24362)
> The scoped token PR just checked all API routes but in fact, some web
routes like `LFS`, git `HTTP`, container, and attachments supports basic
auth. This PR added scoped token check for them.
---------
Signed-off-by: jolheiser <john.olheiser@gmail.com>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
Diffstat (limited to 'tests/integration/api_packages_nuget_test.go')
| -rw-r--r-- | tests/integration/api_packages_nuget_test.go | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/tests/integration/api_packages_nuget_test.go b/tests/integration/api_packages_nuget_test.go index a74d696f03..2240d2a5d4 100644 --- a/tests/integration/api_packages_nuget_test.go +++ b/tests/integration/api_packages_nuget_test.go @@ -16,6 +16,7 @@ import ( "testing" "time" + auth_model "code.gitea.io/gitea/models/auth" "code.gitea.io/gitea/models/db" "code.gitea.io/gitea/models/packages" "code.gitea.io/gitea/models/unittest" @@ -74,7 +75,7 @@ func TestPackageNuGet(t *testing.T) { } user := unittest.AssertExistsAndLoadBean(t, &user_model.User{ID: 2}) - token := getUserToken(t, user.Name) + token := getUserToken(t, user.Name, auth_model.AccessTokenScopePackage) packageName := "test.package" packageVersion := "1.0.3" |