You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Hasnain Lakhani 64c3d55de7
Add support for authentication based on reverse proxy email (#19949)
This is useful in scenarios where the reverse proxy may have knowledge
of user emails, but does not know about usernames set on gitea,
as in the feature request in #19948.

I tested this by setting up a fresh gitea install with one user `mhl`
and email `m.hasnain.lakhani@gmail.com`. I then created a private repo,
and configured gitea to allow reverse proxy authentication.

Via curl I confirmed that these two requests now work and return 200s:

curl http://localhost:3000/mhl/private -I --header "X-Webauth-User: mhl"
curl http://localhost:3000/mhl/private -I --header "X-Webauth-Email: m.hasnain.lakhani@gmail.com"

Before this commit, the second request did not work.

I also verified that if I provide an invalid email or user,
a 404 is correctly returned as before

Closes #19948

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
Co-authored-by: 6543 <6543@obermui.de>
2 years ago
..
source Fix typo in source (#20723) 2 years ago
auth.go Remove dependent on session auth for api/v1 routers (#19321) 2 years ago
auth_test.go format with gofumpt (#18184) 2 years ago
basic.go Move some files into models' sub packages (#20262) 2 years ago
group.go Share HTML template renderers and create a watcher framework (#20218) 2 years ago
httpsign.go Implement http signatures support for the API (#17565) 2 years ago
interface.go Share HTML template renderers and create a watcher framework (#20218) 2 years ago
oauth2.go Move some files into models' sub packages (#20262) 2 years ago
reverseproxy.go Add support for authentication based on reverse proxy email (#19949) 2 years ago
session.go format with gofumpt (#18184) 2 years ago
signin.go Restore user autoregistration with email addresses (#19261) 2 years ago
source.go Refactor auth package (#17962) 3 years ago
sspi_windows.go Share HTML template renderers and create a watcher framework (#20218) 2 years ago
sync.go Refactor auth package (#17962) 3 years ago