)]}'
{
  "commit": "04aaa74edb3d2ea782926bee6d6962ed0b7e20ab",
  "tree": "9f63f0ccc95d109e7ce3f8aaa7eca99b1b48f88b",
  "parents": [
    "929e014a2ee565401588852add49c5c492f2427f"
  ],
  "author": {
    "name": "Álvaro Vilaplana García",
    "email": "alvaro.vilaplana@gmail.com",
    "time": "Tue Dec 27 12:14:00 2022 +0000"
  },
  "committer": {
    "name": "Alvaro Vilaplana Garcia",
    "email": "alvaro.vilaplana@gmail.com",
    "time": "Thu Dec 29 16:05:57 2022 +0100"
  },
  "message": "Allow anonymous clones when pull-replication plugin is enabled.\n\nWhen the command `git clone` is executed over http, behind the scenes it\ndoes a request: `/info/refs?service\u003dgit-upload-pack`. Currently\n`BearerAuthenticationFilter.java` filters ALL the `upload pack` requests\nand therefore it checks the Bearer token header. This feature was added\nto allow Bearer Token Authentication when `git fetch over http` is\nexecuted from other Gerrit instances.\n\nThe fix allows to discriminate the `upload pack` requests, therefore\nBearer token header checking will be done just in the case of\n`git fetch over http` from other Gerrit instances.\n\nBug: Issue 16548\nChange-Id: I9873d92c88b8eb00c895a8e1cce18cae94199ac9\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "8147149bbf94e91f4b873321ef9a047f13f4a11c",
      "old_mode": 33188,
      "old_path": "src/main/java/com/googlesource/gerrit/plugins/replication/pull/api/BearerAuthenticationFilter.java",
      "new_id": "be719467ac691e2a4f61d8ec2a41b491512cd62a",
      "new_mode": 33188,
      "new_path": "src/main/java/com/googlesource/gerrit/plugins/replication/pull/api/BearerAuthenticationFilter.java"
    },
    {
      "type": "modify",
      "old_id": "824496ae849fc36598c849642175dae4b728b6ed",
      "old_mode": 33188,
      "old_path": "src/test/java/com/googlesource/gerrit/plugins/replication/pull/api/BearerAuthenticationFilterTest.java",
      "new_id": "ca69f06025844e893d6b06ce506868a293673d67",
      "new_mode": 33188,
      "new_path": "src/test/java/com/googlesource/gerrit/plugins/replication/pull/api/BearerAuthenticationFilterTest.java"
    }
  ]
}
