Certificate Authentication #11338

New Issue

GiteaMirror · 2025-11-02T09:34:44-06:00

GiteaMirror commented

2025-11-02 09:34:44 -06:00

Originally created by @cwchristerw on GitHub (Jul 26, 2023).

Feature Description

I think it would be great if Gitea had a feature to login with certificates.

I would use like this:

Issue device identity (x509) certificates to every server with Hashicorp Vault.
I would automatically login/register in to Gitea with device identity certificate using Ansible.
Adding device identity (ssh) to that specific account to use it with git command.

Important

Auto create account during first login.
Multiple x509 certificate authentication sources.
Allow using API with x509 certificate.
Use common name as username
No email address
User visibility to private as default

Screenshots

No response

Originally created by @cwchristerw on GitHub (Jul 26, 2023). ### Feature Description I think it would be great if Gitea had a feature to login with certificates. I would use like this: 1. Issue device identity (x509) certificates to every server with Hashicorp Vault. 2. I would automatically login/register in to Gitea with device identity certificate using Ansible. 3. Adding device identity (ssh) to that specific account to use it with git command. **Important** - Auto create account during first login. - Multiple x509 certificate authentication sources. - Allow using API with x509 certificate. - Use common name as username - No email address - User visibility to private as default ### Screenshots _No response_

GiteaMirror added the type/proposal label 2025-11-02 09:34:44 -06:00

GiteaMirror commented

2025-11-02 09:34:45 -06:00

@cwchristerw commented on GitHub (Dec 28, 2023):

In addition it would need to support using request header as client cert from reverse proxy. Similar to https://github.com/hashicorp/vault/pull/17272

@cwchristerw commented on GitHub (Dec 28, 2023): In addition it would need to support using request header as client cert from reverse proxy. Similar to https://github.com/hashicorp/vault/pull/17272

GiteaMirror commented

2025-11-02 09:34:45 -06:00

@cwchristerw commented on GitHub (Feb 7, 2024):

It would be nice also to be able to login with TLS certificate when using https and git protocol.

@cwchristerw commented on GitHub (Feb 7, 2024): It would be nice also to be able to login with TLS certificate when using https and git protocol.

GiteaMirror commented

2025-11-02 09:34:45 -06:00

@techknowlogick commented on GitHub (Feb 7, 2024):

somewhat related: Gitea has support for SSH certificates, and I use vault to manage the certificates to clone and push. I have seen others use a reverse proxy for the behaviour you are looking for in this ticket if you want to achieve this right now.

@techknowlogick commented on GitHub (Feb 7, 2024): somewhat related: Gitea has support for SSH certificates, and I use vault to manage the certificates to clone and push. I have seen others use a reverse proxy for the behaviour you are looking for in this ticket if you want to achieve this right now.

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/gitea#11338