[go: up one dir, main page]

Skip to content

Enable read_repository scope for Repositories API

Problem to solve

IIUC, the read_repository PAT is only applicable for the Repository files API. In any case, it does not seem to apply to the Repositories API. This seems a bit strange. In particular it is not possible to get the file archive with a read_repository PAT from a private repo, while it is possible to get all files via the Repository files API one by one.

Intended users

Read-only API users.

Further details

For https://gitlab.com/api/v4/projects/user%2Frepo/repository/archive.tar.gz?ref=master&private_token=my_read_repository_PAT I get {"error":"insufficient_scope","error_description":"The request requires higher privileges than provided by the access token.","scope":"api"}

Proposal

Enable read_repository scope for Repositories API

Permissions and Security

Not known, except that the read_repository scope is extended to the Repositories API

Documentation

Add "Scope" table (first table on page) from Repository files API docs to Repositories API docs

Testing

Unknown

What does success look like, and how can we measure that?

It is possible to download the Repository archive (and possibly blobs?) from a private repo with a `read_repository´ PAT.