- Gitea API Usage
- Enabling/configuring API access
- Authentication via the API
- More on the Authorization: header
- Listing your issued tokens via the API
- Using basic authentication:
- Using basic authentication:
Gitea API Usage
Enabling/configuring API access
By default, ENABLE_SWAGGER_ENDPOINT
is true, andMAX_RESPONSE_ITEMS
is set to 50. See Config CheatSheet for moreinformation.
Authentication via the API
Gitea supports these methods of API authentication:
- HTTP basic authentication
- token=… parameter in URL query string
- access_token=… parameter in URL query string
- Authorization: token … header in HTTP headers
All of these methods accept the same apiKey token type. You canbetter understand this by looking at the code – as of this writing,Gitea parses queries and headers to find the token inmodules/auth/auth.go.
You can create an apiKey token via your gitea install’s web interface:Settings | Applications | Generate New Token
.
More on the Authorization: header
For historical reasons, Gitea needs the word token
included beforethe apiKey token in an authorization header, like this:
Authorization: token 65eaa9c8ef52460d22a93307fe0aee76289dc675
In a curl
command, for instance, this would look like:
curl -X POST "http://localhost:4000/api/v1/repos/test1/test1/issues" \
-H "accept: application/json" \
-H "Authorization: token 65eaa9c8ef52460d22a93307fe0aee76289dc675" \
-H "Content-Type: application/json" -d "{ \"body\": \"testing\", \"title\": \"test 20\"}" -i
As mentioned above, the token used is the same one you would use inthe token=
string in a GET request.
Listing your issued tokens via the API
As mentioned in#3842,/users/:name/tokens
is special and requires you to authenticateusing BasicAuth, as follows:
Using basic authentication:
$ curl --request GET --url https://yourusername:yourpassword@gitea.your.host/api/v1/users/yourusername/tokens
[{"name":"test","sha1":"..."},{"name":"dev","sha1":"..."}]
原文: https://docs.gitea.io/zh-cn/api-usage/