validate short-lived LocalAgent repository tokens through identity
preserve the delegated principal during repository permission checks
resolve LocalAgent SSH keys without caching and authorize Git commands through identity
require LocalAgent write capability before receive-pack, including proc-receive
Verification
go test ./services/auth ./models/perm/access ./models/asymkey
go test ./routers/private ./cmd -run '^$'
make lint-go (blocked by pre-existing missing modules/options/bindata.dat after header checks)
## Summary
- validate short-lived LocalAgent repository tokens through identity
- preserve the delegated principal during repository permission checks
- resolve LocalAgent SSH keys without caching and authorize Git commands through identity
- require LocalAgent write capability before receive-pack, including proc-receive
## Verification
- go test ./services/auth ./models/perm/access ./models/asymkey
- go test ./routers/private ./cmd -run '^$'
- make lint-go (blocked by pre-existing missing modules/options/bindata.dat after header checks)
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Summary
Verification