CGIT_REPO_* environment variables in auth filter?
hugo at lysator.liu.se
Sun Oct 21 17:20:03 CEST 2018
I started reading the source myself, and found that
cgit_prepare_repo_env is called after all authentication
The diff below shows a possible fix. It does however only
apply for authenticate-cookie and body, and not
authenticate-post (apparently due to the repo only being
loaded in the former two cases).
diff --git a/cgit.c b/cgit.c
index 6301b87..7a4978e 100644
@@ -1081,6 +1081,9 @@ int cmd_main(int argc, const char **argv)
+ if (ctx.repo)
/* Before we go any further, we set ctx.env.authenticated by checking to see
* if the supplied cookie is valid. All cookies are valid if there is no
* auth_filter. If there is an auth_filter, the filter decides. */
On Sat, Oct 20, 2018 at 06:00:52PM +0200, Hugo Hörnquist wrote:
> The manual (cgitrc(5)) states that "All filters are handed
> the following environment variable:" and lists the different
> CGIT_REPO_* variables. I'm trying to access them from an
> auth filter written in lua (a slight modification of the
> included simple-authentication.lua) but they are all unset.
> I have tested running cgit through nginx, lighttpd and
> directly. And none of them worked. Is there something I'm
> missing? Or is this by design and the documentation is
> The variables are however available in a shell-script
> Thanks in advance for the help.
> CGit mailing list
> CGit at lists.zx2c4.com
More information about the CGit