forgejo/routers
M Hickford afebbf29a9
Require authentication for OAuth token refresh ()
According to the OAuth spec
https://datatracker.ietf.org/doc/html/rfc6749#section-6 when "Refreshing
an Access Token"

> The authorization server MUST ... require client authentication for
confidential clients


Fixes 

Co-authored-by: Gusted <williamzijl7@hotmail.com>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2022-10-23 13:28:46 +08:00
..
api Add link to user profile in markdown mention only if user exists () 2022-10-23 01:15:52 +08:00
common Rework raw file http header logic () 2022-07-29 17:26:55 +02:00
install Fix read system configuration bug when installing () 2022-10-18 23:16:58 +08:00
private log real ip of requests from ssh () 2022-10-11 16:57:37 +08:00
utils refactor webhook *NewPost () 2022-08-11 17:48:23 +02:00
web Require authentication for OAuth token refresh () 2022-10-23 13:28:46 +08:00
init.go Add link to user profile in markdown mention only if user exists () 2022-10-23 01:15:52 +08:00