gitea

History

M Hickford 191a74d622 Record OAuth client type at registration (#21316 ) The OAuth spec [defines two types of client](https://datatracker.ietf.org/doc/html/rfc6749#section-2.1), confidential and public. Previously Gitea assumed all clients to be confidential. > OAuth defines two client types, based on their ability to authenticate securely with the authorization server (i.e., ability to > maintain the confidentiality of their client credentials): > > confidential > Clients capable of maintaining the confidentiality of their credentials (e.g., client implemented on a secure server with > restricted access to the client credentials), or capable of secure client authentication using other means. > > public > Clients incapable of maintaining the confidentiality of their credentials (e.g., clients executing on the device used by the resource owner, such as an installed native application or a web browser-based application), and incapable of secure client authentication via any other means. > > The client type designation is based on the authorization server's definition of secure authentication and its acceptable exposure levels of client credentials. The authorization server SHOULD NOT make assumptions about the client type. https://datatracker.ietf.org/doc/html/rfc8252#section-8.4 > Authorization servers MUST record the client type in the client registration details in order to identify and process requests accordingly. Require PKCE for public clients: https://datatracker.ietf.org/doc/html/rfc8252#section-8.1 > Authorization servers SHOULD reject authorization requests from native apps that don't use PKCE by returning an error message Fixes #21299 Co-authored-by: wxiaoguang <wxiaoguang@gmail.com> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>		3 years ago
..
activitypub	Refactor AssertExistsAndLoadBean to use generics (#20797 )	3 years ago
analyze	…
auth	…
avatar	Go 1.19 format (#20758 )	3 years ago
base	Add generic set type (#21408 )	3 years ago
cache	Update go-chi/cache to utilize Ping() (#19719 )	3 years ago
charset	Move go-licenses to generate and separate generate into a frontend and backend component (#21061 )	3 years ago
container	Add generic set type (#21408 )	3 years ago
context	Redirect to new repository owner (#21398 )	3 years ago
convert	Record OAuth client type at registration (#21316 )	3 years ago
csv	Go 1.19 format (#20758 )	3 years ago
doctor	Refactor git command arguments and make all arguments to be safe to be used (#21535 )	3 years ago
emoji	Go 1.19 format (#20758 )	3 years ago
eventsource	Move some files into models' sub packages (#20262 )	3 years ago
generate	…
git	Refactor git command arguments and make all arguments to be safe to be used (#21535 )	3 years ago
gitgraph	Refactor git command arguments and make all arguments to be safe to be used (#21535 )	3 years ago
graceful	Support Proxy protocol (#12527 )	3 years ago
hcaptcha	…
highlight	Upgrade chroma to v2.3.0 (#21259 )	3 years ago
hostmatcher	…
httpcache	Add Cache-Control header to html and api responses, add no-transform (#20432 )	3 years ago
httplib	…
indexer	Refactor git command arguments and make all arguments to be safe to be used (#21535 )	3 years ago
issue/template	Add generic set type (#21408 )	3 years ago
json	…
lfs	Removed some vestigial code related to Range bounds checks (#20312 )	3 years ago
log	test: use `T.TempDir` to create temporary test directory (#21043 )	3 years ago
markup	Add link to user profile in markdown mention only if user exists (#21533 )	3 years ago
mcaptcha	…
metrics	Move some files into models' sub packages (#20262 )	3 years ago
migration	Add more checks in migration code (#21011 )	3 years ago
mirror	…
nosql	fix broken insecureskipverify handling in rediss connection uris (#20967 )	3 years ago
notification	Decouple HookTask from Repository (#17940 )	3 years ago
options	Fix and improve incorrect error messages (#21342 )	3 years ago
packages	Add support for Chocolatey/NuGet v2 API (#21393 )	3 years ago
paginator	Remove unnecessary misspell ignore pattern (#21475 )	3 years ago
password	…
pprof	Go 1.19 format (#20758 )	3 years ago
private	log real ip of requests from ssh (#21216 )	3 years ago
process	Add more linters to improve code readability (#19989 )	3 years ago
proxy	…
proxyprotocol	…
public	Add generic set type (#21408 )	3 years ago
queue	Add generic set type (#21408 )	3 years ago
recaptcha	…
references	Remove unnecessary misspell ignore pattern (#21475 )	3 years ago
regexplru	…
repository	Refactor git command arguments and make all arguments to be safe to be used (#21535 )	3 years ago
secret	…
session	…
setting	Add system setting table with cache and also add cache supports for user setting (#18058 )	3 years ago
sitemap	…
ssh	…
storage	Save files in local storage as umask (#21198 )	3 years ago
structs	Record OAuth client type at registration (#21316 )	3 years ago
svg	…
sync	Add generic set type (#21408 )	3 years ago
system	Add system setting table with cache and also add cache supports for user setting (#18058 )	3 years ago
templates	Fix generating compare link (#21519 )	3 years ago
test	…
timeutil	Share HTML template renderers and create a watcher framework (#20218 )	3 years ago
translation	Make every not exist error unwrappable to a fs.ErrNotExist (#20891 )	3 years ago
typesniffer	…
updatechecker	Add system setting table with cache and also add cache supports for user setting (#18058 )	3 years ago
upload	…
uri	…
user	…
util	Make every not exist error unwrappable to a fs.ErrNotExist (#20891 )	3 years ago
validation	Add more checks in migration code (#21011 )	3 years ago
watcher	Share HTML template renderers and create a watcher framework (#20218 )	3 years ago
web	refactor webhook *NewPost (#20729 )	3 years ago