Allow creation of AccessTokens with other AccessToken #610

New Issue

lerentis · 2022-10-16T14:14:15Z

lerentis commented

2022-10-16 14:14:15 +00:00

Hello there,

i am currently trying to implement the creation of AccessTokens in my Terraform Provider, and noticed that the creation of AccessTokens is actively blocked if the autentication is not http basic auth (see here).

This behavior is currently forcing the terraform provider configuration to use basic auth as well for managing AccessTokens, which is rather cumbersome and not really nice in terms of security.

I fail to see reasons for this, so i would argue to remove this behavior from the sdk. If there are still valid concerns to keep this, it would be highly appreciated if one could enlighten me, so i could document this in my provider as well :)

Hello there, i am currently trying to implement the creation of AccessTokens in my [Terraform Provider](https://git.uploadfilter24.eu/lerentis/terraform-provider-gitea), and noticed that the creation of AccessTokens is actively blocked if the autentication is not http basic auth (see [here](https://gitea.com/gitea/go-sdk/src/branch/main/gitea/user_app.go#L54)). This behavior is currently forcing the terraform provider configuration to use basic auth as well for managing AccessTokens, which is rather cumbersome and not really nice in terms of security. I fail to see reasons for this, so i would argue to remove this behavior from the sdk. If there are still valid concerns to keep this, it would be highly appreciated if one could enlighten me, so i could document this in my provider as well :)

Sign in to join this conversation.

No Milestone

No Assignees

1 Participants

Notifications

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: gitea/go-sdk#610