rgrove / rawgit

Served files from raw.githubusercontent.com, but with the correct content types. No longer actively developed.
https://rawgit.com
MIT License
2.39k stars 488 forks source link

Add support for private repositories #62

Closed mitar closed 9 years ago

mitar commented 9 years ago

When I access a private raw file in GitHub, GitHub appends a token to the URL so that one can acess it:

https://raw.githubusercontent.com/...?token=...

When I open rawgit URL I get 404. :-(

It seems token is not used/passed on?

I would need this to be able to add SVG images to the README in a private repository.

rgrove commented 9 years ago

Sorry, private repos are intentionally not supported because I don't want peoples' tokens flowing through RawGit (or the CDN). That's too much scary responsibility!

Feel free to fork RawGit and run a private instance that adds that functionality though.

mitar commented 9 years ago

Oh. But you could just display a warning once somebody pastes in a link with a token? No? That this is insecure. And aren't tokens per-file anyway?

Hm, you could at least display an error in this case. And not strange 404.

rgrove commented 9 years ago

Good idea. I'll consider adding a special error.

nzec commented 6 years ago

@rgrove Any plans for this?

rgrove commented 6 years ago

Still no plans to support private repos. Especially now, since people have recently been trying to use RawGit to distribute malware. The last thing I need is malware hosted in a private repo that I can't see.

ErShakirAnsari commented 5 years ago

Can we NOW access a private repo's raw file using private access token in url?