T

mathiasandClaude Opus 4.8 9b7f53bdda feat(auth): document caller header precedence + warn on conflict (#10 )

CallerMiddleware silently preferred X-Auth-Request-User over X-Forwarded-User
with no explanation and no signal when both were set. Documented the precedence
(X-Auth-Request-User is the verified OIDC identity oauth2-proxy sets, so it is
authoritative; X-Forwarded-User is a fallback), and it now takes a *slog.Logger
and warns when both headers are present and disagree, so a proxy
misconfiguration is visible instead of silently resolved. Table-driven tests
cover precedence (both/single/none) and the conflict-warning path.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-03 22:57:24 +02:00

.context

chore: re-sync context adapters from canonical AGENT.md

2026-07-01 22:53:15 +02:00

.gitea/workflows

fix(ci): quote "on" key so Gitea parses workflow triggers

2026-06-03 08:38:46 +02:00

.githooks

chore: adopt trunk-based development

2026-05-17 09:44:52 +02:00

.skills

feat(auth): JWT-or-static middleware + /.well-known/oauth-protected-resource (issue #5 )

2026-05-12 11:30:52 +02:00

cmd/gitea-mcp

feat(auth): document caller header precedence + warn on conflict (#10 )

2026-07-03 22:57:24 +02:00

docs/superpowers

docs: add GitOps agent tools implementation plan

2026-05-06 22:22:41 +02:00

internal

feat(auth): document caller header precedence + warn on conflict (#10 )

2026-07-03 22:57:24 +02:00

scripts

feat(auth): JWT-or-static middleware + /.well-known/oauth-protected-resource (issue #5 )

2026-05-12 11:30:52 +02:00

.aider.conf.yml

feat(auth): JWT-or-static middleware + /.well-known/oauth-protected-resource (issue #5 )

2026-05-12 11:30:52 +02:00

.aider.conventions.md

chore: re-sync context adapters from canonical AGENT.md

2026-07-01 22:53:15 +02:00

.cursorrules

chore: re-sync context adapters from canonical AGENT.md

2026-07-01 22:53:15 +02:00

.gitignore

feat: initial scaffold with /healthz

2026-05-04 20:13:41 +02:00

AGENTS.md

chore: re-sync context adapters from canonical AGENT.md

2026-07-01 22:53:15 +02:00

CLAUDE.md

chore: adopt trunk-based development

2026-05-17 09:44:52 +02:00

Dockerfile

fix(ci): allow Dockerfile build to fetch internal gitea modules

2026-05-22 12:12:33 +02:00

go.mod

chore(rename): module gitea.d-ma.be → git.d-ma.be/mathias/gitea-mcp (#39 )

2026-07-03 22:48:26 +02:00

go.sum

fix(deps): migrate mcp-chassis to git.d-ma.be path — unblock CD build (#74 )

2026-07-01 23:06:35 +02:00

README.md

chore: adopt trunk-based development

2026-05-17 09:44:52 +02:00

Taskfile.yml

chore: adopt trunk-based development

2026-05-17 09:44:52 +02:00

README.md

gitea-mcp

Streamable HTTP MCP service exposing Gitea repo operations to Claude apps. See ~/dev/AI/infra/docs/superpowers/specs/2026-05-04-gitea-mcp-gitops-workflow-design.md.

Quickstart

task setup:hooks   # installs .githooks/pre-push — runs task check before every push
task check         # context sync + lint + test + vet
task build         # produces bin/gitea-mcp

This repo uses Trunk-Based Development. Commit directly to main. The pre-push hook enforces the quality gate locally; CI re-runs task check on every push.