Git (with Gitea) done with https - how to pass thru SSO?

[AttaInsularis]

When running Gitea behind Pangolin, there are two options (if user can’t use SSH):

1. Disable SSO and authenticate with credentials during git push, or
2. Encounter the error fatal: unable to update url base from redirection: caused rightfully by SSO.

I tried using a shareable link that includes a token parameter, e.g.
https://sub.mydomain.com/git/test.git?p_token=valueid.valuetoken, but this doesn't work.

The problem may be that after git push Git appends additional path elements, such as
https://sub.mydomain.com/git/test.git + /info/refs?service=git-receive-pack, so the token stuck in the middle.

Does anyone know how to push thru so that users with a token can operate behind SSO?

[AttaInsularis]

The use of Rule for path on Resource does not work either.

error: RPC failed; HTTP 302 curl 22 The requested URL returned error: 302
send-pack: unexpected disconnect while reading sideband packet
fatal: the remote end hung up unexpectedly

Added /SomeGitUserName/git_repo_name.git/info/refs

If ?service=git-receive-pack&p_token=value.token added it's not recognized (not the path but query param) and thus can't be used.
So it's not possible to let Pangolin parse the token in such way.