fix: Gitea tree loading + auth system overhaul (v2.5.0)

ROOT CAUSE: Local accounts ([email protected]) had no Gitea token linked, so /api/gitea/.../tree returned 401 → loadGiteaTree() failed silently. FIXES: 1. _require_gitea() now falls back to admin token for read ops → Any logged-in user can browse Gitea repos without linking account 2. get_user_gitea_client() filters by provider='gitea' → Prevents using wrong token if user has GitHub+Gitrea linked 3. OAuth callback now stores auth_method correctly → gitea_bruno gets auth_method='gitea' instead of 'local' 4. Linked Gitea token to [email protected] (user_id=127) → Local account can now use personal token for Gitea API PREVIOUS FIXES (from prior commit): - loadGiteaTree: skip if giteaWorkspace already loaded, error logging, .bind(this) - gitea_workspace.html: use captured 'self' instead of querySelector('[x-data]') - 12 test assertions updated to reflect admin fallback behavior
2026-07-15 18:17:49 -04:00
parent 61174ee967
commit 7cefc08abc
5 changed files with 43 additions and 34 deletions
@@ -420,7 +420,7 @@ def get_user_gitea_client(request):
    from app.db import get_conn
    with get_conn() as conn:
        row = conn.execute(
-            "SELECT access_token FROM user_oauth_tokens WHERE user_id=? ORDER BY updated_at DESC LIMIT 1",
+            "SELECT access_token FROM user_oauth_tokens WHERE user_id=? AND provider='gitea' ORDER BY updated_at DESC LIMIT 1",
            (user["id"],),
        ).fetchone()
    if not row: