8 Commits

Include renames

Author	SHA1	Message	Date
LatteandClaude Opus 4.8	3392d8f69b	feat(security): resource-type-aware authorization with fail-closed defaults ... Add aegis_gitea_mcp.authz: classify every dispatched call (typed tools and gitea_request) by resource type (repository/org/user_self/user_owned/ misc_global/admin/unknown) and enforce a type-specific rule in service-PAT mode, on top of policy + WRITE_MODE. Every decision fails closed: - org: signed-in user must be a verified org member (Gitea-checked). - user_owned: owner must be the caller or a member org of the caller. - user_self: token-owner-scoped endpoints denied (token is the bot's). - admin: default-deny; allowed only with RAW_API_ALLOW_SENSITIVE opt-in AND a verified site admin. - misc_global: reads allowed, writes denied. - unknown / unverifiable: denied and audited. Wire it into the server's service-PAT dispatch: repository calls keep the existing per-user collaborator check; non-repo calls (previously blanket-denied) now go through the resource-type gate, opening the org/user/admin surface safely. Verification results are cached briefly (fail-closed: positives only). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-27 11:09:50 +02:00
LatteandClaude Opus 4.8	e873d0325b	feat: scope list_repositories to the authenticated user in service-PAT mode ... Previously list_repositories was blocked in service-PAT mode because it has no repository target for the per-user permission check, so users could not list their repositories at all (the connector surfaced a generic error). list_repositories now returns only the repositories the signed-in user owns or contributes to, instead of everything the bot token can see: - gitea_client.py: add list_user_repositories(login) — resolves the user id and queries /api/v1/repos/search with the uid filter. - repository.py: list_repositories_tool uses the user-scoped path when a service PAT is configured and a user login is present; pure-OAuth mode still uses the user's own /user/repos. - server.py: allow list_repositories through the service-PAT guard (it is scoped to the user in the handler); all other tools still require a repository target. - README.md: document the new user-scoped behavior and its visibility caveat. Tests: user-scoped client method (uid resolution + unknown user), PAT-mode tool scoping, and conftest now clears the request context between tests to prevent contextvar login leakage across files. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-14 17:07:19 +02:00
Latte	541124e92a	feat: harden Claude MCP OAuth transport	2026-06-13 21:05:11 +02:00
Latte	59e1ea53a8	Add OAuth2/OIDC per-user Gitea authentication ... Introduce a GiteaOAuthValidator for JWT and userinfo validation and fallbacks, add /oauth/token proxy, and thread per-user tokens through the request context and automation paths. Update config and .env.example for OAuth-first mode, add OpenAPI, extensive unit/integration tests, GitHub/Gitea CI workflows, docs, and lint/test enforcement (>=80% cov).	2026-02-25 16:54:01 +01:00
Latte	5969892af3	feat: harden gateway with policy engine, secure tools, and governance docs	2026-02-14 16:06:43 +01:00
Latte	d82fe87113	update	2026-02-11 18:16:00 +01:00
Ubuntu	3c71d5da0a	update	2026-01-31 15:55:22 +00:00
Latte	a9708b33e2	.	2026-01-29 19:53:36 +01:00