unkin/artifactapi
3
0
Fork 0
Code Issues 5 Pull Requests 2 Actions Packages Projects Releases 1 Wiki Activity

Gate local repo writes behind OIDC tokens #169

Merged
benvin merged 2 commits from benvin/upload-write-auth into master 2026-10-25 15:17:34 +11:00
Conversation 2 Commits 2 Files Changed 12
+386 -27

2 Commits

Author SHA1 Message Date
unkin-agent 61cb4c872c Issue anonymous registry token for rejected credentials
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/test Pipeline was successful
Details
ci/woodpecker/pr/build Pipeline was successful
Details
2026-10-25 13:36:28 +11:00
unkin-agent 32da0fd750 Gate local repo writes behind OIDC tokens
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/test Pipeline was successful
Details
ci/woodpecker/pr/build Pipeline was successful
Details 
Add ARTIFACTAPI_AUTH_UPLOADS to require a verified token for local
uploads, deletes, evictions, /api/v1 publishes and /v2 push. Accept the
token as Bearer, Token, Basic password or bare header, and serve a
Docker registry token endpoint so pulls stay anonymous.
 2026-10-25 13:24:23 +11:00