From 68998fa07edf6b0d5bf7c3781f6da6fff3635936 Mon Sep 17 00:00:00 2001
From: cheney <cbed@163.com>
Date: Sat, 8 Aug 2026 09:13:23 +0800
Subject: [PATCH] =?UTF-8?q?token=20=E5=90=8D=E5=AD=97=E4=BF=AE=E6=94=B9?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .gitea/workflows/android-build.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/android-build.yml b/.gitea/workflows/android-build.yml
index d9d8b1f..87be4b2 100644
--- a/.gitea/workflows/android-build.yml
+++ b/.gitea/workflows/android-build.yml
@@ -149,7 +149,9 @@ jobs:
       # ---------- 上传到 Gitea Generic Package ----------
       - name: Publish APK to Gitea packages
         env:
-          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
+          # 注意: 不能用 GITEA_TOKEN (内置 job token, 无组织 packages 写权限, 且命名规则禁止 GITEA_ 前缀)
+          # 用一个自定义名 secret 存放有 packages 写权限的 user token
+          PACKAGE_TOKEN: ${{ secrets.PACKAGE_TOKEN }}
           APK_PATH: ${{ steps.apk.outputs.path }}
         run: |
           set -euo pipefail
@@ -164,7 +166,7 @@ jobs:
           URL="${GITHUB_SERVER_URL}/api/packages/${OWNER}/generic/${PKG_NAME}/${PKG_VERSION}/${FILE_NAME}"
           echo "上传到: ${URL}"
           curl -sS --fail-with-body \
-            -H "Authorization: token ${GITEA_TOKEN}" \
+            -H "Authorization: token ${PACKAGE_TOKEN}" \
             --upload-file "$APK_PATH" \
             "${URL}"
           echo ""