gitea

Commit Graph

Author	SHA1	Message	Date
wxiaoguang	49dd906753	Use base32 for 2FA scratch token (#18384 ) * Use base32 for 2FA scratch token * rename Secure* to Crypto*, add comments	3 years ago
Lunny Xiao	de8e3948a5	Refactor auth package (#17962 )	3 years ago
Kamil Domański	021df29623	Allow U2F 2FA without TOTP (#11573 ) This change enables the usage of U2F without being forced to enroll an TOTP authenticator. The `/user/auth/u2f` has been changed to hide the "use TOTP instead" bar if TOTP is not enrolled. Fixes #5410 Fixes #17495	3 years ago
Lunny Xiao	91e21d4fca	Move twofactor to models/login (#17143 )	3 years ago
zeripath	9302eba971	DBContext is just a Context (#17100 ) * DBContext is just a Context This PR removes some of the specialness from the DBContext and makes it context This allows us to simplify the GetEngine code to wrap around any context in future and means that we can change our loadRepo(e Engine) functions to simply take contexts. Signed-off-by: Andrew Thornton <art27@cantab.net> * fix unit tests Signed-off-by: Andrew Thornton <art27@cantab.net> * another place that needs to set the initial context Signed-off-by: Andrew Thornton <art27@cantab.net> * avoid race Signed-off-by: Andrew Thornton <art27@cantab.net> * change attachment error Signed-off-by: Andrew Thornton <art27@cantab.net>	3 years ago
Lunny Xiao	a4bfef265d	Move db related basic functions to models/db (#17075 ) * Move db related basic functions to models/db * Fix lint * Fix lint * Fix test * Fix lint * Fix lint * revert unnecessary change * Fix test * Fix wrong replace string * Use Context Correct committer spelling and fix wrong replaced words Co-authored-by: zeripath <art27@cantab.net>	3 years ago
silverwind	1e6fa57acb	Use single shared random string generation function (#15741 ) * Use single shared random string generation function - Replace 3 functions that do the same with 1 shared one - Use crypto/rand over math/rand for a stronger RNG - Output only alphanumerical for URL compatibilty Fixes: #15536 * use const string method * Update modules/avatar/avatar.go Co-authored-by: a1012112796 <1012112796@qq.com> Co-authored-by: a1012112796 <1012112796@qq.com>	4 years ago
silverwind	cda44750cb	Attachments: Add extension support, allow all types for releases (#12465 ) * Attachments: Add extension support, allow all types for releases - Add support for file extensions, matching the `accept` attribute of `<input type="file">` - Add support for type wildcard mime types, e.g. `image/` - Create repository.release.ALLOWED_TYPES setting (default unrestricted) - Change default for attachment.ALLOWED_TYPES to a list of extensions - Split out POST /attachments into two endpoints for issue/pr and releases to prevent circumvention of allowed types check Fixes: https://github.com/go-gitea/gitea/pull/10172 Fixes: https://github.com/go-gitea/gitea/issues/7266 Fixes: https://github.com/go-gitea/gitea/pull/12460 Ref: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/input/file#Unique_file_type_specifiers rename function * extract GET routes out of RepoMustNotBeArchived Co-authored-by: Lauris BH <lauris@nix.lv>	4 years ago
Lunny Xiao	1645d4a5d8	Use ID or Where to instead directly use Get when load object from database (#11925 ) * Use ID or Where to instead directly use Get when load object from database * Apply suggestions from code review Co-authored-by: 6543 <6543@obermui.de> Co-authored-by: 6543 <6543@obermui.de> Co-authored-by: zeripath <art27@cantab.net>	5 years ago
Lunny Xiao	85202d4784	Display ui time with customize time location (#7792 ) * display ui time with customize time location * fix lint * rename UILocation to DefaultUILocation * move time related functions to modules/timeutil * fix tests * fix tests * fix build * fix swagger	5 years ago
SagePtr	59f879bfec	Fix double-generation of scratch token (#6832 ) (#6833 )	6 years ago
techknowlogick	adf3f004b6	Switch plaintext scratch tokens to use hash instead (#4331 )	6 years ago
Lauris BH	1e1ece8f3d	Do not allow to reuse TOTP passcode (#3878 )	7 years ago
Codruț Constantin Gușoi	96c268c0fc	Implements generator cli for secrets (#3531 ) Signed-off-by: Codruț Constantin Gușoi <codrut.gusoi@gmail.com>	7 years ago
Morgan Bazalgette	edce41ae65	go back to using CFB for AES decryption/encryption for 2FA (#3274 )	7 years ago
Lunny Xiao	f2e20c81b6	Refactor struct's time to remove unnecessary memory usage (#3142 ) * refactor struct's time to remove unnecessary memory usage * use AsTimePtr simple code * fix tests * fix time compare * fix template on gpg * use AddDuration instead of Add	7 years ago
Ethan Koenig	b7ebaf6d20	Various wiki bug fixes (#2996 ) * Update macaron * Various wiki bug fixes	7 years ago
Ethan Koenig	aa962deec0	Replace deprecated Id method with ID (#2655 )	7 years ago
Lunny Xiao	a8717e5e3a	Use AfterLoad instead of AfterSet on Structs (#2628 ) * use AfterLoad instead of AfterSet on Structs * fix the comments on AfterLoad * fix the comments on action AfterLoad	7 years ago
Lunny Xiao	005900baea	Use created & updated instead BeforeInsert & BeforeUpdate (#2482 ) * use created & updated instead BeforeInsert & BeforeUpdate * fix vendor checksum * only show generated SQL when development mode * remove extra update column updated_unix * remove trace config	7 years ago
Andrew	6dd096b7f0	Two factor authentication support (#630 ) * Initial commit for 2FA support Signed-off-by: Andrew <write@imaginarycode.com> * Add vendored files * Add missing depends * A few clean ups * Added improvements, proper encryption * Better encryption key * Simplify "key" generation * Make 2FA enrollment page more robust * Fix typo * Rename twofa/2FA to TwoFactor * UNIQUE INDEX -> UNIQUE	8 years ago

2 Commits (b8911fb45673fdc3fce587892c4d9215e7c15019)