Git/gitea-tea
1
0 Fork 0
mirror of https://gitea.com/gitea/tea.git synced 2026-10-26 11:01:25 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix(auth): make logout reject only the credential tea stored

Browse Source 
Signed-off-by: bircni <bircni@icloud.com>
This commit is contained in:
bircni committed 2026-10-18 17:14:46 +02:00
1 parent d67963b29a
commit 45e015e7dc
6 files changed
+50 -28
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

internal/app/auth.go
+6 -6
View File
@@ -709,7 +709,7 @@ instance, such as a copy of its token that a keychain kept after a push.`,
if err != nil {
return err
}
account, exists := t.host.Users[t.User]
_, exists := t.host.Users[t.User]
switch {
case len(t.host.Users) == 0:
return clierr.Wrap(clierr.Usage, fmt.Errorf("not logged in to %s", t.Host))
@@ -725,14 +725,14 @@ instance, such as a copy of its token that a keychain kept after a push.`,
if err != nil {
return err
}
if err := manager.Logout(t.Host, t.User); err != nil {
removed, err := manager.Logout(t.Host, t.User)
if err != nil {
return err
}
a.done(cmd, "Logged out of %s (%s)", t.Host, t.User)
if !account.Tokenless() {
if err := git.RejectCredentials(cmd.Context(), a.gitProbe(), a.options.cwd, t.Host, t.User); err != nil {
a.warn(cmd, "Could not ask git's credential helpers to forget %s on %s", t.User, t.Host)
}
// Helpers erase only the copies that hold the removed token, not the user's own credentials.
if err := git.RejectCredentials(cmd.Context(), a.gitProbe(), a.options.cwd, t.Host, t.User, removed.AccessToken); err != nil {
a.warn(cmd, "Could not ask git's credential helpers to forget %s on %s", t.User, t.Host)
}
if s, err := a.settings(); err == nil {
if active := s.Hosts.Hosts[t.Host].User; active != "" && active != t.host.User {