c79cc1ab9e
Add PUBLIC_BASE_URL and refine OAuth scopes
docker / lint (push) Has been cancelled
docker / test (push) Has been cancelled
docker / docker-build (push) Has been cancelled
lint / lint (push) Has been cancelled
test / test (push) Has been cancelled
2026-02-25 20:49:08 +01:00
59e1ea53a8
Add OAuth2/OIDC per-user Gitea authentication
...
docker / lint (push) Has been cancelled
docker / test (push) Has been cancelled
docker / docker-build (push) Has been cancelled
lint / lint (push) Has been cancelled
test / test (push) Has been cancelled
Introduce a GiteaOAuthValidator for JWT and userinfo validation and
fallbacks, add /oauth/token proxy, and thread per-user tokens through
the
request context and automation paths. Update config and .env.example for
OAuth-first mode, add OpenAPI, extensive unit/integration tests,
GitHub/Gitea CI workflows, docs, and lint/test enforcement (>=80% cov).
2026-02-25 16:54:01 +01:00
a00b6a0ba2
update
2026-02-14 18:18:34 +01:00
ecc87cbb65
quick fix
2026-02-14 17:18:30 +01:00
5969892af3
feat: harden gateway with policy engine, secure tools, and governance docs
2026-02-14 16:06:43 +01:00
d82fe87113
update
2026-02-11 18:16:00 +01:00
Ubuntu
3c71d5da0a
update
2026-01-31 15:55:22 +00:00
b990c6c527
feat: allow api_key query parameter for ChatGPT UI
...
ChatGPT UI lacks custom header support for MCP servers. Added
query parameter fallback (?api_key=) alongside Authorization
header to authenticate requests.
Updated tests to cover query param authentication.
2026-01-29 21:03:05 +01:00
f52e99e328
test: add comprehensive test suite for authentication system
...
Added three test modules covering:
- test_auth.py: Unit tests for authentication module
- API key generation and validation
- Rate limiting
- Multiple keys support
- Constant-time comparison
- test_server.py: Server endpoint tests
- Authentication middleware
- Protected vs public endpoints
- Various auth header formats
- Rate limiting at endpoint level
- test_integration.py: Integration tests
- Complete authentication flow
- Key rotation simulation
- Multiple tool discovery
- Error message validation
All tests verify functionality without breaking existing features.
2026-01-29 20:45:44 +01:00
