4 Commits

Include renames

Author	SHA1	Message	Date
mathiasandClaude Sonnet 4.6	9d08352324	feat(auth): fall back to GITEA_MCP_DEFAULT_TOKEN when no Bearer header ... claude.ai connectors call the server with no Authorization header (confirmed via request logging). Add a configurable default Gitea PAT so unauthenticated clients (like claude.ai) can still reach the server. Claude Code continues to pass per-request PATs; defaultToken="" preserves the existing strict behaviour when the env var is unset. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-09 22:22:04 +02:00
mathiasandClaude Sonnet 4.6	3784bcc31b	fix(lint): check resp.Body.Close error in bearer_test.go ... Silences errcheck violations that have been breaking CI since the test was written. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-09 13:25:37 +02:00
mathias	923689afa5	feat: replace static API token with per-request Gitea PAT pass-through ... Callers now supply their own Gitea PAT as a Bearer token; the server validates it against GET /api/v1/user and threads it through context to all downstream Gitea API calls. GITEA_API_TOKEN env var and the GiteaAPIToken config field are removed.	2026-05-07 21:04:47 +02:00
mathias	0b5daca198	feat(auth): X-Auth-Request-User context middleware	2026-05-04 21:05:16 +02:00