Commit Graph

432 Commits (56d931aeac653ed948cbecf643fc74809b32dec3)

Author SHA1 Message Date
SagePtr 0449330dbc Make cookies HttpOnly and obey COOKIE_SECURE flag ()
Lanre Adelowo 69a855f3d4 log user in after a successful sign up ()
Dingjun 819f50ccd5 fix panic issue on update avatar email () ()
fix 
techknowlogick adf3f004b6
Switch plaintext scratch tokens to use hash instead ()
Lanre Adelowo 630f234223 Add flash message after an account has been successfully activated ()
* added new locale text
techknowlogick 492ec97a46
Redirect to correct page after using scratch token ()
Fluf f035dcd4f2 Add Recaptcha functionality to Gitea ()
Clar Charr c71ee33057 Increase default TOTP secret size to 320 bits ()
Jonas Franz 801843b011 Fix open redirect vulnerability on login screen ()
* Fix open redirect vulnerability on login screen

Signed-off-by: Jonas Franz <info@jonasfranz.software>

* Reorder imports

Signed-off-by: Jonas Franz <info@jonasfranz.software>

* Replace www. from Domain too

Signed-off-by: Jonas Franz <info@jonasfranz.software>
David Schneiderbauer 0b3ea42847 hide issues from org private repos w/o team assignment ()
David Schneiderbauer 69bfd81b1c fix missing data on redirects ()
Magnus Lindvall cdb9478774 LDAP Public SSH Keys synchronization ()
* Add LDAP Key Synchronization feature

Signed-off-by: Magnus Lindvall <magnus@dnmgns.com>

* Add migration: add login source id column for public_key table

* Only update keys if needed

* Add function to only list pubkey synchronized from ldap

* Only list pub ssh keys synchronized from ldap. Do not sort strings as ExistsInSlice does it.

* Only get keys belonging to current login source id

* Set default login source id to 0

* Some minor cleanup. Add integration tests (updete dep testify)
Alexey Terentyev b908ac9fab Added repository search ordered by stars or forks. Forks column in admin repo list. ()
* Added repository search order by stars or forks.
Added Forks column to admin repository list.

Signed-off-by: Alexey Terentyev <axifnx@gmail.com>

* Renamed search repo template

Signed-off-by: Alexey Terentyev <axifnx@gmail.com>
David Schneiderbauer 31067c0a89 remove collaborative repositories from search on user profiles ()
* remove collaborative repositories from search on user profiles

* rename 'My Repositories' to 'Repositories'
Jonas Franz 951309f76a Add support for FIDO U2F ()
* Add support for U2F

Signed-off-by: Jonas Franz <info@jonasfranz.software>

* Add vendor library
Add missing translations

Signed-off-by: Jonas Franz <info@jonasfranz.software>

* Minor improvements

Signed-off-by: Jonas Franz <info@jonasfranz.software>

* Add U2F support for Firefox, Chrome (Android) by introducing a custom JS library
Add U2F error handling

Signed-off-by: Jonas Franz <info@jonasfranz.software>

* Add U2F login page to OAuth

Signed-off-by: Jonas Franz <info@jonasfranz.software>

* Move U2F user settings to a separate file

Signed-off-by: Jonas Franz <info@jonasfranz.software>

* Add unit tests for u2f model
Renamed u2f table name

Signed-off-by: Jonas Franz <info@jonasfranz.software>

* Fix problems caused by refactoring

Signed-off-by: Jonas Franz <info@jonasfranz.software>

* Add U2F documentation

Signed-off-by: Jonas Franz <info@jonasfranz.software>

* Remove not needed console.log-s

Signed-off-by: Jonas Franz <info@jonasfranz.software>

* Add default values to app.ini.sample
Add FIDO U2F to comparison

Signed-off-by: Jonas Franz <info@jonasfranz.software>
David Schneiderbauer 44754774f1 Re-enable random avatar feature ()
* reenable random avatar feature

* replace Size check by Filename check
David Schneiderbauer 2aabfc1afa Splitted the user settings code into several files to be more maintainable ()
* refactor setting router code

splitted up one huge router settings file into the smaller files
representing the actual page structure

* move code to subfolder

* rename functions

* renamed files

* add copyright information
David Schneiderbauer 099372d76c Refactor User Settings ()
* moved avatar to profile page

* combined password change, email and account deletion into account settings page

* combined totp, access tokens, linked accounts and openid into security settings page

* move access tokens to applications settings page

* small change to restart drone build

* fix change avatar url on profile page

* redirect old settings urls to new ones

* enforce only one autofocus attribute on settings pages

* set correct redirect status code

* fmt fix
FabioFortini 1546458f7d issue-2768: added new option allow_only_external_registration ()
kolaente 1fdf560678 Added user language setting ()
* Added user language setting

* Added translation string for setting

* Fixed import order + typo

* improved checking if the user has a language saved in the db

* The current saved language is now set a default inside the dropdown

* fmt

* When a user signs in and doesn't have a language saved, the current browser language is saved

* updated gitea-sdk

* Merge branch 'master' of https://github.com/go-gitea/gitea into save-user-language

# Conflicts:
#	models/migrations/migrations.go
#	models/migrations/v62.go

* Made tests work again

* trigger CI

* trigger CI

* fmt

* re-trigger that FUCKING CI SO IT REALLY PICKS UP THE LATEST COMMIT ISTEAD OF PREDENDING TO DO SO

* re-trigger that FUCKING CI SO IT REALLY PICKS UP THE LATEST COMMIT ISTEAD OF PREDENDING TO DO SO

* When loggin in, only the language col gets updated instead of everything
Lauris BH 1e1ece8f3d
Do not allow to reuse TOTP passcode ()
Lauris BH 7b2b900e13 Refactor and simplify redirect to url ()
bugreport0 521945a2d2 Fix missing translations when updating username. ()
* Fix missing translations when updating username.

* Fix reserved username translated string test.

* Fix 'username reserved' string test a bit more.
Bo-Yi Wu 04b3e8cbdc
refactor: reduce sql query in retrieveFeeds ()
Codruț Constantin Gușoi 96c268c0fc Implements generator cli for secrets ()
Signed-off-by: Codruț Constantin Gușoi <codrut.gusoi@gmail.com>
Kim "BKC" Carlbäcker e5b8b4b5ec Cleanup models.User.HashPassword ()
Morgan Bazalgette 65861900cd Handle refactor ()
* Replace all ctx.Handle with ctx.ServerError or ctx.NotFound

* Change Handle(403) to NotFound, avoid using macaron's NotFound
Antoine GIRARD 84feb016f5 Remove useless fmt.Errorf("%v", err) ()
Morgan Bazalgette 674cfb7cac Change EncodePasswd to HashPassword ()
* Change EncodePasswd to HashPassword

* Create test+benchmark for HashPassword
Ethan Koenig 4c9341f689 Fix bugs in issue dashboard stats ()
Ethan Koenig 68179dc676 Remove unnecessary function call ()
Sasha Varlamov 7ec6cddd27 Add 'mark all read' option to notifications ()
* Add 'mark all read' option to notifications

Signed-off-by: Sasha Varlamov <sasha@sashavarlamov.com>

* Fix exported comment

Signed-off-by: Sasha Varlamov <sasha@sashavarlamov.com>

* Format method comments

Signed-off-by: Sasha Varlamov <sasha@sashavarlamov.com>

* Fix exported comment

Signed-off-by: Sasha Varlamov <sasha@sashavarlamov.com>

Format method comments

Signed-off-by: Sasha Varlamov <sasha@sashavarlamov.com>

Tests for reactions ()

* Unit tests for reactions

* Fix import order

Signed-off-by: Lauris Bukšis-Haberkorns <lauris@nix.lv>

Fix reaction possition when there is attachments ()

Refactor notifications swap function

* Accept change to drop beforeupdate call

* Update purge notifications error message for consistency

* Drop unnecessary check for mark all as read button

* Remove debugging comment
Ethan Koenig c0a7899416 Sort repos in issues dashboard sidebar ()
* Sort repos in issues dashboard sidebar

* Sort repos by name
Lunny Xiao b3d5ba6f90 Fix missing password length check when change password ()
* fix missing password length check when change password

* add tests for change password
Lunny Xiao 13e59c8b7a remove unused variable ()
Ethan Koenig 91f3d77ceb Unit tests for wiki routers ()
Michael Kuhn 420fc8efc2 Disable add key button if SSH is disabled ()
schaffman5 7e6c198f21 Apply LANDING_PAGE config options for logged in users ()
* Extended LANDINGPAGE config variable to logged in users and added switch for 'organizations' in addition to 'home' and 'explore'.

* Updated comments.

Signed-off-by: Mike Schaffer <mschaff@gmail.com>

* Extended LANDINGPAGE config variable to trigger when user logs in and added switch for 'organizations' in addition to 'home' and 'explore'.

Signed-off-by: Mike Schaffer <mschaff@gmail.com>

* Extended LANDINGPAGE config variable to logged in users and added switch for 'organizations' in addition to 'home' and 'explore'.

* Updated comments.

Signed-off-by: Mike Schaffer <mschaff@gmail.com>

* Extended LANDINGPAGE config variable to trigger when user logs in and added switch for 'organizations' in addition to 'home' and 'explore'.

Signed-off-by: Mike Schaffer <mschaff@gmail.com>

* Removed superfluous conditional and correct whitespace.

Signed-off-by: Mike Schaffer <mschaff@gmail.com>

* Update app.ini

Reverted new line.

* Formatting.

Signed-off-by: Mike Schaffer <mschaff@gmail.com>
Morlinest ddb7f59ef4 Add search mode option to /api/repo/search ()
* Add repo type option to /api/repo/search

* Add tests and fix result of collaborative filter in specific condition

* Fix/optimize search & tests

* Improve integration tests

* Fix lint errors

* Fix unit tests

* Change and improve internal implementation of repo search

* Use NonexistentID

* Make search api more general

* Change mirror and fork search behaviour

* Fix tests & typo in comment
Lunny Xiao 9e865cee67 Merge password and 2fa page on user settings ()
* merge password and 2fa page on user settings
Kazuki Sawada 43253202e9 Change default sort order ()
* sort repositories by `updated_unix` in Explore

* Fix UI problem

* Added missing sort order "newest"

* Change default sort order

* fmt
Morlinest 9a75a5d59b Use custom type and constants to hold order by options ()
Rémy Boulanouar e5d80b7090 Implementation of all repositories of a user from user->settings ()
* Implementation of all repositories of a user from user->settings

* Update message when no repository found

* Update according to comments

* Change UI to have a better look

* improved user repositories UI
Antoine GIRARD 7c417bbb0d Only check at least one email gpg key ()
* Only require one email (possibly not yet validated)

* Update message error and check validation of commit

* Add integrations tests

* Complete integration for import

* Add pre-check/optimization

* Add some test (not finished)

* Finish

* Fix fixtures

* Fix typo

* Don't guess key ID
Lunny Xiao e41da3845d fix duplicated feed ()
Lunny Xiao f61a1d210c Fix missing collabrative repos ()
* fix missing collabrative repos

* fix bug of collabrative

* fix SQL quotes
David Schneiderbauer 174255e74e Log failed authentication attempts with remote address for fail2ban ()
Signed-off-by: David Schneiderbauer <dschneiderbauer@gmail.com>
Bwko 1a5fe4326f Add collaborative repositories to the dashboard ()
* Add collaborative repositories to the dashboard

Remove some unused code from the Dashboard func

* fix some bug and some refactor

* fix tests
Sandro Santilli 2c3a229a3c Add OpenID configuration in install page ()
David Schneiderbauer 5707ad3bb7 Add AppURL without trailing slash to TOTP issuer parameter to prevent conflicting accounts on multiple gitea installations ()
Signed-off-by: David Schneiderbauer <dschneiderbauer@gmail.com>