<Location />
  AuthType oauth20
  Require all granted
</Location>
<LocationMatch ".*/git-receive-pack">
  AuthType oauth20
  Require claims_expr '(.scope | index("https://src.fedoraproject.org/push") != null)'
</LocationMatch>

<LocationMatch ".*/info/refs">
  <If "%{QUERY_STRING} =~ /service=git-upload-pack/">
    Require all granted
  </If>
  <Else>
    AuthType oauth20
    Require claims_expr '(.scope | index("https://src.fedoraproject.org/push") != null)'
  </Else>
</LocationMatch>

SuexecUserGroup pagure packager
