mathias/gitea-mcp

Fork 0

T

mathiasandClaude Sonnet 5 5601927dc8

CD / Lint / Test / Vet (push) Successful in 10s

Details

CD / Build & Import (push) Successful in 26s

Details

CD / Deploy via GitOps (push) Has been skipped

Details

feat(auth): per-caller Gitea PAT pass-through (#59 )

Replaces the shared GITEA_MCP_DEFAULT_TOKEN for all callers. When a
request's bearer validates directly against Gitea's own /api/v1/user,
that token is used for every upstream call this request makes instead
of the service PAT, and the caller identity comes from Gitea's own
login rather than the proxy header. Any other bearer (static token,
JWT, none) falls through unchanged to the existing chassis auth.

Prep: Authentik now SSOs into Gitea (infra a32801c), so each real user
can mint their own PAT from their own linked account.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-07-22 08:22:50 +02:00

.context

chore(context): re-sync adapters from root AGENT.md (skills → mathias/skills repo)

2026-07-04 00:39:35 +02:00

.gitea/workflows

ci(cd): skip docs-only pushes; move HOW_GITEA_MCP_WORKS into docs/

2026-07-07 00:43:46 +02:00

.githooks

chore: adopt trunk-based development

2026-05-17 09:44:52 +02:00

.skills

feat(auth): JWT-or-static middleware + /.well-known/oauth-protected-resource (issue #5 )

2026-05-12 11:30:52 +02:00

cmd/gitea-mcp

feat(auth): per-caller Gitea PAT pass-through (#59 )

2026-07-22 08:22:50 +02:00

docs

ci(cd): skip docs-only pushes; move HOW_GITEA_MCP_WORKS into docs/

2026-07-07 00:43:46 +02:00

internal

feat(auth): per-caller Gitea PAT pass-through (#59 )

2026-07-22 08:22:50 +02:00

scripts

feat(auth): JWT-or-static middleware + /.well-known/oauth-protected-resource (issue #5 )

2026-05-12 11:30:52 +02:00

.aider.conf.yml

feat(auth): JWT-or-static middleware + /.well-known/oauth-protected-resource (issue #5 )

2026-05-12 11:30:52 +02:00

.aider.conventions.md

chore(context): re-sync adapters from root AGENT.md (skills → mathias/skills repo)

2026-07-04 00:39:35 +02:00

.cursorrules

chore(context): re-sync adapters from root AGENT.md (skills → mathias/skills repo)

2026-07-04 00:39:35 +02:00

.gitignore

feat: initial scaffold with /healthz

2026-05-04 20:13:41 +02:00

AGENTS.md

chore(context): re-sync adapters from root AGENT.md (skills → mathias/skills repo)

2026-07-04 00:39:35 +02:00

CLAUDE.md

chore(housekeeping): canonical git.d-ma.be host + honest version string

2026-07-03 23:58:34 +02:00

Dockerfile

build(version): inject real build version via ldflags (#47 )

2026-07-04 08:28:05 +02:00

go.mod

feat(auth): trust the k8s cluster OIDC issuer for ServiceAccount tokens (ADR-0011 D1)

2026-07-07 00:16:39 +02:00

go.sum

feat(auth): trust the k8s cluster OIDC issuer for ServiceAccount tokens (ADR-0011 D1)

2026-07-07 00:16:39 +02:00

README.md

chore: adopt trunk-based development

2026-05-17 09:44:52 +02:00

Taskfile.yml

chore: adopt trunk-based development

2026-05-17 09:44:52 +02:00

README.md

gitea-mcp

Streamable HTTP MCP service exposing Gitea repo operations to Claude apps. See ~/dev/AI/infra/docs/superpowers/specs/2026-05-04-gitea-mcp-gitops-workflow-design.md.

Quickstart

task setup:hooks   # installs .githooks/pre-push — runs task check before every push
task check         # context sync + lint + test + vet
task build         # produces bin/gitea-mcp

This repo uses Trunk-Based Development. Commit directly to main. The pre-push hook enforces the quality gate locally; CI re-runs task check on every push.