NXD: Access token should be valid for project and namespace (!3) · Merge Requests · nexedi / gitlab-ce

NXD: Access token should be valid for project and namespace

when doing git clone https://gitlab-ci-token:RUNNER_TOKEN@GITLAB_URL/NAMESPACE/PROJECT.git user is always gitlab-ci-token and cannot be used to identify the project, runner token is not unique per project.

If two projects in the namespace has the same token and the wrong project is returned by build_access_token_check method, gitlab will simply return 404.

build_access_token_check now take namespace_id as parameter so that we can ensure that we authenticate on the right project.

NXD: Access token should be valid for project and namespace

Check out, review, and merge locally