Redirect to signin page when trying to open a private repository #2973

Closed
opened 2025-11-02 04:55:45 -06:00 by GiteaMirror · 1 comment
Owner

Originally created by @bouffa on GitHub (Feb 25, 2019).

Description

When a not signed-in user/visitor tries to open a private repository using a direct link (or a wiki page of a private repository), I would expect it to be redirected to the sign-in page instead of the 404 page of the current behavior. Shouldn't be this the expected behavior in this case?

Screenshots

Originally created by @bouffa on GitHub (Feb 25, 2019). <!-- 1. Please speak English, this is the language all of us can speak and write. 2. Please ask questions or configuration/deploy problems on our Discord server (https://discord.gg/NsatcWJ) or forum (https://discourse.gitea.io). 3. Please take a moment to check that your issue doesn't already exist. 4. Please give all relevant information below for bug reports, because incomplete details will be handled as an invalid report. --> - Gitea version (or commit ref): 594f591 - Git version: - Operating system: - Database (use `[x]`): - [ ] PostgreSQL - [ ] MySQL - [ ] MSSQL - [ ] SQLite - Can you reproduce the bug at https://try.gitea.io: - [x] Yes (provide example URL) : https://try.gitea.io/bouffa/test/wiki/Home - [ ] No - [ ] Not relevant - Log gist: ## Description When a not signed-in user/visitor tries to open a private repository using a direct link (or a wiki page of a private repository), I would expect it to be redirected to the sign-in page instead of the 404 page of the current behavior. Shouldn't be this the expected behavior in this case? ## Screenshots <!-- **If this issue involves the Web Interface, please include a screenshot** -->
GiteaMirror added the reviewed/wontfix label 2025-11-02 04:55:45 -06:00
Author
Owner

@techknowlogick commented on GitHub (Feb 25, 2019):

This would leak private information. As it would allow non authenticated users to determine if a specific repo exists

@techknowlogick commented on GitHub (Feb 25, 2019): This would leak private information. As it would allow non authenticated users to determine if a specific repo exists
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#2973