http return 401 when gitea is idle for about 30 minites

[RightFS]

Description

normal response

GET /admin/leigod-im.git/info/refs?service=git-receive-pack HTTP/1.1
Host: git-im.nn.com
User-Agent: git/2.51.0.windows.1
Accept: */*
Accept-Encoding: deflate, gzip, br, zstd
Pragma: no-cache


HTTP/1.1 401 Unauthorized
Date: Wed, 31 Dec 2025 03:22:58 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 13
Connection: keep-alive
Cache-Control: max-age=0, private, must-revalidate, no-transform
Set-Cookie: i_like_gitea=26bf20515421cefc; Path=/; HttpOnly; SameSite=Lax
Set-Cookie: _csrf=On1siBhxrm2iKDhFB8c60V8IMgU6MTc2NzE1MTM3ODAyMTgxNDA3NA; Path=/; Max-Age=86400; HttpOnly; SameSite=Lax
Www-Authenticate: Basic realm="Gitea"
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN

Unauthorized

GET /admin/leigod-im.git/info/refs?service=git-receive-pack HTTP/1.1
Host: git-im.nn.com
Authorization: Basic T0FVVEhfVVNFUjpleUpoYkdjaU9pSlNVekkxTmlJc0ltdHBaQ0k2SW05blFYVjRNWEphUzI5cVNqTmtZbTlwTlhWaGVWVm5kWGMwYUVaalVVUmtlVTlITkUwMlpWQkRWVlVpTENKMGVYQWlPaUpLVjFRaWZRLmV5Sm5iblFpT2pFc0luUjBJam93TENKbGVIQWlPakUzTmpjeE5UUTVOemdzSW1saGRDSTZNVGMyTnpFMU1UTTNPSDAuaHlFNWVWTjBJVjV2NzRkZ1BiZEd1SzhsdHA2aXhsQkFkX0FBQnF0b2RieFVORzRDTUtqV0hpT2VyR1MwbWp0enNzd3hzMTlfWXVwVjZ5WmhlejBHMVJ5aEJEVEY0SGdld1ZHaDZCWERuM1dDbEh5QlpKSjdHMnRrYk9sX2Jqa0RvWnJzTXlVeTIxOEtWSzJHSXp2TnB1Qk44dG91bWY3cS1hV1J3ZUhreldweWhyc3hTdFh4MlFhZlg2T1pNNWt4aUQ0RnBQTEQ2VEJ6S09kNTdpYmFzckNKVTFlY3FWOVc1bDlEZm1obUN3N2tGVzNTUE9ZaVBBVUVJd2xKZUZaTUtBOEgxV25BZC1SY2k1Y0wxcElWa0dQWDRuNmRUSGk0MUo3VkJzOTAtWGFkYm1KRGZ4dG4tYWEtUDdZZTUxQlN6bEQteE9BTm40M3oteXYxa216YnlYeG41VWc3dGhHYkx2YVpwMVhHRV9rdlVncGFIbnhVMTRnX25fU1p6YWlFaFdKZzJhU3JFaUxtejRfUEI1WnF0QUI5MkUyOTcyTTFsS0VqR2hiQ3E1M0V3dl83N1pTWU1kaDZoTW5fMWpvLUxXLTc5NzAtZkJZQ1pXb0NCMEVEVTQyc1duMmN1alR2dndKU2JEWmNYM0ZSZnNlZ2RRdmtUSHRyVGZ2M205VllEYWd5VkRCeHNfYUZpZ3Ziem5XNm5IMldMeDNQRC1KS3VabE9adm01a0o4LWh1UGZBVDQ5Rkdzd1FSTkd4T0pMRjRVaGlWWDBsTXpMZFpnVlhoZGt2YVRTQ015TjE2WnVSOU9wdW9xTVI2LVRXMFkxaEtjNFpMOXJyd2xlbjNncW5HbXhTUFNfNE9oSWY2LXZCNHp0d0g4UndkVTBDZVV2YTNGb2pGZ2c4VzQ=
User-Agent: git/2.51.0.windows.1
Accept: */*
Accept-Encoding: deflate, gzip, br, zstd
Pragma: no-cache


HTTP/1.1 200 OK
Date: Wed, 31 Dec 2025 03:22:58 GMT
Content-Type: application/x-git-receive-pack-advertisement
Content-Length: 233
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate
Expires: Fri, 01 Jan 1980 00:00:00 GMT
Pragma: no-cache
Set-Cookie: i_like_gitea=27b127ec36acc1c4; Path=/; HttpOnly; SameSite=Lax
Set-Cookie: _csrf=k9OVf3-rVROMONaGgqYVPylhDCk6MTc2NzE1MTM3ODg2MzYzMjM2NQ; Path=/; Max-Age=86400; HttpOnly; SameSite=Lax
X-Frame-Options: SAMEORIGIN

001f# service=git-receive-pack
000000c2d36722c7b1a85eee33f453250493cd1cd3c689d2 refs/heads/ci.report-status report-status-v2 delete-refs side-band-64k quiet atomic ofs-delta push-options object-format=sha1 agent=git/2.49.1-Linux
0000

failed response

GET /admin/leigod-im.git/info/refs?service=git-receive-pack HTTP/1.1
Host: git-im.nn.com
User-Agent: git/2.51.0.windows.1
Accept: */*
Accept-Encoding: deflate, gzip, br, zstd
Pragma: no-cache


HTTP/1.1 401 Unauthorized
Date: Wed, 31 Dec 2025 03:22:09 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 13
Connection: keep-alive
Cache-Control: max-age=0, private, must-revalidate, no-transform
Set-Cookie: i_like_gitea=74c3119379603f51; Path=/; HttpOnly; SameSite=Lax
Set-Cookie: _csrf=5jBRW5XgN2rzUH5lMW98A7WovrU6MTc2NzE1MTMyOTA0MjUyMzIxOA; Path=/; Max-Age=86400; HttpOnly; SameSite=Lax
Www-Authenticate: Basic realm="Gitea"
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN

Unauthorized

GET /admin/leigod-im.git/info/refs?service=git-receive-pack HTTP/1.1
Host: git-im.nn.com
Authorization: Basic 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
User-Agent: git/2.51.0.windows.1
Accept: */*
Accept-Encoding: deflate, gzip, br, zstd
Pragma: no-cache


HTTP/1.1 401 Unauthorized
Date: Wed, 31 Dec 2025 03:22:09 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 28
Connection: keep-alive
Cache-Control: max-age=0, private, must-revalidate, no-transform
Set-Cookie: i_like_gitea=6837da4498454c6f; Path=/; HttpOnly; SameSite=Lax
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN

Failed to authenticate user

GET /admin/leigod-im.git/info/refs?service=git-receive-pack HTTP/1.1
Host: git-im.nn.com
Authorization: Basic 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
User-Agent: git/2.51.0.windows.1
Accept: */*
Accept-Encoding: deflate, gzip, br, zstd
Pragma: no-cache


HTTP/1.1 401 Unauthorized
Date: Wed, 31 Dec 2025 03:22:09 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 28
Connection: keep-alive
Cache-Control: max-age=0, private, must-revalidate, no-transform
Set-Cookie: i_like_gitea=833f6838e168acc1; Path=/; HttpOnly; SameSite=Lax
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN

Failed to authenticate user

gitea error log

2025/12/31 03:22:09 HTTPRequest [I] router: completed GET /admin/leigod-im.git/info/refs?service=git-receive-pack for 192.168.212.88:56158, 401 Unauthorized in 3.5ms @ repo/githttp.go:511(repo.GetInfoRefs)
2025/12/31 03:22:09 routers/web/web.go:121:Routes.webAuth.10() [E] Failed to verify user: user does not exist [uid: 0, name: OAUTH_USER]
2025/12/31 03:22:09 HTTPRequest [I] router: completed GET /admin/leigod-im.git/info/refs?service=git-receive-pack for 192.168.212.88:56158, 401 Unauthorized in 5.4ms @ web/web.go:118(web.Routes.webAuth)
2025/12/31 03:22:09 routers/web/web.go:121:Routes.webAuth.10() [E] Failed to verify user: user does not exist [uid: 0, name: OAUTH_USER]
2025/12/31 03:22:09 HTTPRequest [I] router: completed GET /admin/leigod-im.git/info/refs?service=git-receive-pack for 192.168.212.88:56158, 401 Unauthorized in 3.6ms @ web/web.go:118(web.Routes.webAuth)
2025/12/31 03:22:58 HTTPRequest [I] router: completed GET /admin/leigod-im.git/info/refs?service=git-receive-pack for 192.168.212.88:35564, 401 Unauthorized in 3.5ms @ repo/githttp.go:511(repo.GetInfoRefs)
2025/12/31 03:22:58 HTTPRequest [I] router: completed POST /login/oauth/access_token for 192.168.212.88:35568, 200 OK in 86.4ms @ auth/oauth2_provider.go:464(auth.AccessTokenOAuth)
2025/12/31 03:22:58 HTTPRequest [I] router: completed GET /admin/leigod-im.git/info/refs?service=git-receive-pack for 192.168.212.88:35564, 200 OK in 19.5ms @ repo/githttp.go:511(repo.GetInfoRefs)
2025/12/31 03:22:59 HTTPRequest [I] router: completed POST /api/internal/hook/pre-receive/admin/leigod-im for 127.0.0.1:0, 200 OK in 9.9ms @ private/hook_pre_receive.go:106(private.HookPreReceive)
2025/12/31 03:23:00 HTTPRequest [I] router: completed POST /api/internal/hook/post-receive/admin/leigod-im for 127.0.0.1:0, 200 OK in 24.5ms @ private/hook_post_receive.go:33(private.HookPostReceive)
2025/12/31 03:23:00 HTTPRequest [I] router: completed POST /admin/leigod-im.git/git-receive-pack for 192.168.212.88:35564, 200 OK in 927.2ms @ repo/githttp.go:479(repo.ServiceReceivePack)
2025/12/31 03:23:00 .../actions/workflows.go:34:init.0.1() [E] Failed to decode node {4 0 !!map   <nil> [0xc0038eca00 0xc0038ecaa0]    394 9} into *map[string][]interface {}: yaml: unmarshal errors:
  line 394: cannot unmarshal !!str `${{ fro...` into []interface {}
2025/12/31 03:23:01 HTTPRequest [I] router: completed POST /api/actions/runner.v1.RunnerService/UpdateLog for 192.168.212.77:54366, 0  in 23.5ms @ <autogenerated>:1(http.Handler.ServeHTTP-fm)
2025/12/31 03:23:01 HTTPRequest [I] router: completed POST /api/actions/runner.v1.RunnerService/UpdateTask for 192.168.212.77:54366, 200 OK in 67.4ms @ <autogenerated>:1(http.Handler.ServeHTTP-fm)
2025/12/31 03:23:02 HTTPRequest [I] router: completed GET /actions/checkout/info/refs?service=git-upload-pack for 192.168.212.77:54366, 200 OK in 57.0ms @ repo/githttp.go:511(repo.GetInfoRefs)
2025/12/31 03:23:02 HTTPRequest [I] router: completed GET /actions/checkout/info/refs?service=git-upload-pack for 192.168.212.77:54366, 200 OK in 10.3ms @ repo/githttp.go:511(repo.GetInfoRefs)
2025/12/31 03:23:02 HTTPRequest [I] router: completed GET /actions/upload-artifact/info/refs?service=git-upload-pack for 192.168.212.77:54366, 200 OK in 52.0ms @ repo/githttp.go:511(repo.GetInfoRefs)

Gitea Version

1.24.6

Can you reproduce the bug on the Gitea demo site?

No

Log Gist

No response

Screenshots

Git Version

2.49.1

Operating System

linux x64 k8s

How are you running Gitea?

helm install gitea gitea-charts/gitea
just modify ingress config

Database

PostgreSQL

[RightFS]

I don't known what git and gitea do about the Authorization token, but you can see there are 2 tokens in my wireshark capture, one is 200 and the other is 401.

[RightFS]

I use same console session, same git.exe, same git repo, the first push after long time idle will faild, but the second try will work.