gitea

ynkmr/gitea

Fork 0

mirror of https://github.com/go-gitea/gitea.git synced 2026-08-18 17:28:06 +09:00

Files

T

History

7857c5f843 feat(user): Personal access tokens can be regenerated (#38907 )

Lets users regenerate a personal access token's value in place, keeping
its name and scopes, instead of deleting and recreating it. Useful when
a token was shared with a third party (e.g. an AI agent) and needs to
be invalidated immediately without redoing scope selection.

Follows the same pattern already used for OAuth2 application client
secrets (`GenerateClientSecret`/`RegenerateSecret`).

**Testing**: added a model unit test and a web integration test;
manually
verified in the running dev server that the old token stops
authenticating
and the new one works immediately after regenerating.

<img width="1040" height="245" alt="image"
src="https://github.com/user-attachments/assets/4de0d8b4-1fc4-49cf-a859-95e24d0b2c0a"
/>

Fixes #38683.

---------

Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

2026-08-17 18:17:16 +00:00

access_token_scope_test.go

fix: various security fixes (#38406 )

2026-07-12 17:14:09 +00:00

access_token_scope.go

fix: various security fixes (#38406 )

2026-07-12 17:14:09 +00:00

access_token_test.go

feat(user): Personal access tokens can be regenerated (#38907 )

2026-08-17 18:17:16 +00:00

access_token.go

feat(user): Personal access tokens can be regenerated (#38907 )