From f31d55c9ef7a9b20cd747cd631eecebb6f768fd9 Mon Sep 17 00:00:00 2001 From: miyuko Date: Mon, 27 Jul 2026 17:22:23 +0100 Subject: [PATCH] Fold case of pull request author's username for preview uploads. Hostnames are lowercase ASCII, so preview upload authorization would always fail for repositories whose owners have uppercase letters in their usernames. Resolves: https://codeberg.org/git-pages/git-pages/issues/228 --- src/auth.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/auth.go b/src/auth.go index 0afcb18..264a33e 100644 --- a/src/auth.go +++ b/src/auth.go @@ -620,7 +620,7 @@ func authorizeForgejoActionRun(repoURL string, forgeToken string, prNumber strin return nil, AuthError{http.StatusUnauthorized, "workflow run not triggered by pull request"} } prOwner, prRepository := actionRun.PullRequest.OwnerName, actionRun.PullRequest.RepositoryName - if fmt.Sprintf("/%s/%s.git", prOwner, prRepository) != parsedRepoURL.Path { + if fmt.Sprintf("/%s/%s.git", strings.ToLower(prOwner), prRepository) != parsedRepoURL.Path { return nil, AuthError{http.StatusUnauthorized, "pull request repository does not match"} } if fmt.Sprintf("%d", actionRun.PullRequest.Number) != prNumber {