Skip to content

Support download access by PRIVATE-TOKEN header

username-removed-128633 requested to merge stanhu/gitlab-ce-support-token-retrieval-by-headers into master

Originally opened at !2522 (closed).

Currently there is no way to download a raw file without embedding the token in the URL, which exposes the token in the URL. There should be an way of sending this information via the header as the API does.

Closes https://github.com/gitlabhq/gitlabhq/issues/8137

Merge request reports