forgejo-mcp/operation
Byte Flavour 4969ee5881
feat: robust stateless auth with security fixes and improved tests
This commit addresses the review feedback on PR #138:
- Fixed a privilege escalation vulnerability where failed ephemeral client
  creation would silently fall back to the global singleton token.
- Refactored forgejo.Client(ctx) to return (*forgejo.Client, error).
- Updated all 100+ tool handlers to properly handle client initialization errors.
- Improved token extraction to handle schemes (token/bearer) case-insensitively.
- Enhanced Unit Tests (pkg/forgejo/forgejo_test.go) to verify that different
  concurrent requests with different tokens correctly use their respective
  tokens in the Authorization header.
- Updated README and demos to reflect case-insensitivity support.
2026-05-24 13:44:48 +02:00
..
actions feat: robust stateless auth with security fixes and improved tests 2026-05-24 13:44:48 +02:00
attachment feat: add issue & comment attachment tools (#109) 2026-05-02 12:06:54 +02:00
issue feat: robust stateless auth with security fixes and improved tests 2026-05-24 13:44:48 +02:00
org feat: robust stateless auth with security fixes and improved tests 2026-05-24 13:44:48 +02:00
params feat: robust stateless auth with security fixes and improved tests 2026-05-24 13:44:48 +02:00
pull feat: robust stateless auth with security fixes and improved tests 2026-05-24 13:44:48 +02:00
release feat: robust stateless auth with security fixes and improved tests 2026-05-24 13:44:48 +02:00
repo feat: robust stateless auth with security fixes and improved tests 2026-05-24 13:44:48 +02:00
search feat: robust stateless auth with security fixes and improved tests 2026-05-24 13:44:48 +02:00
tracking feat: robust stateless auth with security fixes and improved tests 2026-05-24 13:44:48 +02:00
user feat: robust stateless auth with security fixes and improved tests 2026-05-24 13:44:48 +02:00
version fix: add /v2 suffix to module path for go install compatibility 2025-12-29 15:51:03 +01:00
wiki feat: robust stateless auth with security fixes and improved tests 2026-05-24 13:44:48 +02:00
operation.go feat: robust stateless auth with security fixes and improved tests 2026-05-24 13:44:48 +02:00