forgejo-aneksajo/routers
Matthias Riße 66e54e33fe Allow anonymous HEAD requests to annex/objects (#41)
Git-annex emits HEAD requests for keys while trying to drop them from a
repository that was cloned via http. Forgejo asked for authentication
for these HEAD requests. This meant that cloning and getting files was
possible without authentication, but dropping was not.

Since the response to a HEAD request is a subset of the response to a
GET request it is safe to make those unauthenticated as well. That is
what this change does, although limited to the
:username/:reponame/annex/objects endpoint.

Fixes #40.

Reviewed-on: https://codeberg.org/matrss/forgejo-aneksajo/pulls/41
Co-authored-by: Matthias Riße <m.risse@fz-juelich.de>
Co-committed-by: Matthias Riße <m.risse@fz-juelich.de>
2025-03-24 09:06:59 +01:00
..
api [v10.0/forgejo] fix(api): typo in API description for repoSearch (#7202) 2025-03-11 14:03:19 +00:00
common [v10.0/forgejo] fix: use correct input for strip slashes middleware (#7306) 2025-03-22 17:30:28 +00:00
install [CHORE] Move to new sessioner library 2024-08-25 03:47:08 +02:00
private git-annex: add configuration setting [annex].ENABLED 2025-03-24 09:02:03 +01:00
utils [PORT] drop utils.IsExternalURL (and expand IsRiskyRedirectURL tests) (#3167) 2024-04-15 13:03:08 +00:00
web Allow anonymous HEAD requests to annex/objects (#41) 2025-03-24 09:06:59 +01:00
init.go Revert "Open telemetry integration (#3972)" 2024-08-07 11:22:43 +02:00