Add option to allow only gitea users to access public endpoints #10284

Closed
opened 2025-11-02 09:03:11 -06:00 by GiteaMirror · 3 comments
Owner

Originally created by @unrealjo on GitHub (Feb 16, 2023).

Feature Description

  • I want an option to restrict access to public endpoints like public repos and user profile .

  • As I'm self hosting my gitea instance, I want only users with an account to access any page the gitea and avoid leaking some code which is supposed to be shared only with some specific users.

  • Below in the screenshot below I able access any repos once I have the its url

Screenshots

2023-02-16_18-09

Originally created by @unrealjo on GitHub (Feb 16, 2023). ### Feature Description - I want an option to restrict access to public endpoints like public repos and user profile . - As I'm self hosting my gitea instance, I want only users with an account to access any page the gitea and avoid leaking some code which is supposed to be shared only with some specific users. - Below in the screenshot below I able access any repos once I have the its url ### Screenshots ![2023-02-16_18-09](https://user-images.githubusercontent.com/63888397/219438829-028e820c-946e-40f5-93ec-72f92728c62c.png)
GiteaMirror added the type/proposaltype/feature labels 2025-11-02 09:03:11 -06:00
Author
Owner

@jolheiser commented on GitHub (Feb 16, 2023):

Do you mean something like https://docs.gitea.io/en-us/config-cheat-sheet/#service-service REQUIRE_SIGNIN_VIEW?

@jolheiser commented on GitHub (Feb 16, 2023): Do you mean something like https://docs.gitea.io/en-us/config-cheat-sheet/#service-service `REQUIRE_SIGNIN_VIEW`?
Author
Owner

@unrealjo commented on GitHub (Feb 16, 2023):

Yes exactly 😳

@unrealjo commented on GitHub (Feb 16, 2023): Yes exactly 😳
Author
Owner

@xgdgsc commented on GitHub (Apr 18, 2023):

Why not make REQUIRE_SIGNIN_VIEW default to true? Or make the initial configuration page more distinctive of internal/public usage and provide different defaults?

@xgdgsc commented on GitHub (Apr 18, 2023): Why not make REQUIRE_SIGNIN_VIEW default to true? Or make the initial configuration page more distinctive of internal/public usage and provide different defaults?
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#10284