M Hickford 34f509eb7a Parse OAuth Authorization header when request omits client secret (#21351) ... This fixes error "unauthorized_client: invalid client secret" when client includes secret in Authorization header rather than request body. OAuth spec permits both. Sanity validation that client id and client secret in request are consistent with Authorization header. Improve error descriptions. Error codes remain the same. Co-authored-by: wxiaoguang <wxiaoguang@gmail.com> Co-authored-by: zeripath <art27@cantab.net>		2022-10-07 10:53:49 +08:00
..
admin	Redirect if user does not exist (#20981)	2022-08-29 15:44:39 +02:00
auth	Parse OAuth Authorization header when request omits client secret (#21351)	2022-10-07 10:53:49 +08:00
dev	Make better use of i18n (#20096)	2022-06-26 22:19:22 +08:00
events
explore	Only show relevant repositories on explore page (#19361)	2022-08-25 20:38:41 +02:00
feed	Use absolute links in feeds (#21229)	2022-09-21 16:51:42 -04:00
healthcheck
misc
org	Move some files into models' sub packages (#20262)	2022-08-25 10:31:57 +08:00
repo	Tag list should include draft releases with existing tags (#21263)	2022-10-03 20:05:53 +08:00
user	Add pages to view watched repos and subscribed issues/PRs (#17156)	2022-09-29 22:09:14 +03:00
auth.go
auth_windows.go
base.go	Share HTML template renderers and create a watcher framework (#20218)	2022-08-28 10:43:25 +01:00
goget.go
home.go	Add sitemap support (#18407)	2022-06-25 19:06:01 +02:00
metrics.go
nodeinfo.go
swagger_json.go
web.go	Add pages to view watched repos and subscribed issues/PRs (#17156)	2022-09-29 22:09:14 +03:00
webfinger.go	Fix various typos (#20338)	2022-07-12 23:32:37 +02:00