OAuth2 Provider authentication requires keyword 'token'. Is there a way to remove this requirement? #13547

Open
opened 2025-11-02 10:45:43 -06:00 by GiteaMirror · 1 comment
Owner

Originally created by @aenagy on GitHub (Sep 30, 2024).

Feature Description

The OAuth2 Provider documentation (https://docs.gitea.com/development/api-usage#oauth2-provider) states that the keyword 'token' is required in the Authorization header and this is required due to historical reasons. Is there an easy/simple way to remove this requirement, e.g. edit 'app.ini'? If not can this be added?

I'm working with a vendor supplied application that isn't designed specifically to work with Gitea but is designed to work with GitHub, GitLab and BitBucket and I have been able to get it work work without problems with GitHub.com Server Enteprise.

Screenshots

No response

Originally created by @aenagy on GitHub (Sep 30, 2024). ### Feature Description The OAuth2 Provider documentation (https://docs.gitea.com/development/api-usage#oauth2-provider) states that the keyword 'token' is required in the Authorization header and this is required due to historical reasons. Is there an easy/simple way to remove this requirement, e.g. edit 'app.ini'? If not can this be added? I'm working with a vendor supplied application that isn't designed specifically to work with Gitea but is designed to work with GitHub, GitLab and BitBucket and I have been able to get it work work without problems with GitHub.com Server Enteprise. ### Screenshots _No response_
GiteaMirror added the topic/authenticationtype/proposal labels 2025-11-02 10:45:43 -06:00
Author
Owner

@lunny commented on GitHub (Oct 9, 2024):

Use bearer instead of token is also supported.

@lunny commented on GitHub (Oct 9, 2024): Use `bearer` instead of `token` is also supported.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#13547