Forgejo: Least‑Privilege Authentication vs. Expired Credentials – Interoperability with External Auth Providers
Forgejo: Least‑Privilege Authentication vs. Expired Credentials – Interoperability with External Auth Providers The goal is to integrate an external OAuth2 provider with Forgejo while ensuring that user access remains strictly scoped and that revoked or expired tokens do not continue to grant access. Forgejo accepts OAuth2 access tokens but does not automati