You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
gitea/services/auth
Rowan Bohde 407b6e6dfc
allow the actions user to login via the jwt token (#32527)
We have some actions that leverage the Gitea API that began receiving
401 errors, with a message that the user was not found. These actions
use the `ACTIONS_RUNTIME_TOKEN` env var in the actions job to
authenticate with the Gitea API. The format of this env var in actions
jobs changed with go-gitea/gitea/pull/28885 to be a JWT (with a
corresponding update to `act_runner`) Since it was a JWT, the OAuth
parsing logic attempted to parse it as an OAuth token, and would return
user not found, instead of falling back to look up the running task and
assigning it to the actions user.

Make ACTIONS_RUNTIME_TOKEN in action runners could be used,
attempting to parse Oauth JWTs. The code to parse potential old
`ACTION_RUNTIME_TOKEN` was kept in case someone is running an older
version of act_runner that doesn't support the Actions JWT.
3 months ago
..
source Update go dependencies (#32389) 4 months ago
auth.go Refactor CSRF token (#32216) 5 months ago
auth_test.go Fix attachment download bug (#27486) 1 year ago
auth_token.go Enhanced auth token / remember me (#27606) 1 year ago
auth_token_test.go Refactor timeutil package (#28623) 1 year ago
basic.go Fix basic auth with webauthn (#32531) 3 months ago
group.go Remove `Named` interface (#26913) 1 year ago
httpsign.go Remove SHA1 for support for ssh rsa signing (#31857) 6 months ago
interface.go Reduce usage of `db.DefaultContext` (#27073) 1 year ago
main_test.go Enhanced auth token / remember me (#27606) 1 year ago
oauth2.go allow the actions user to login via the jwt token (#32527) 3 months ago
oauth2_test.go allow the actions user to login via the jwt token (#32527) 3 months ago
reverseproxy.go Save initial signup information for users to aid in spam prevention (#31852) 6 months ago
session.go Fix the bug that user may logout if he switch pages too fast (#29962) 11 months ago
signin.go remove util.OptionalBool and related functions (#29513) 12 months ago
source.go Final round of `db.DefaultContext` refactor (#27587) 1 year ago
sspi.go Save initial signup information for users to aid in spam prevention (#31852) 6 months ago
sspiauth_posix.go Make SSPI auth mockable (#27036) 1 year ago
sspiauth_windows.go Make SSPI auth mockable (#27036) 1 year ago
sync.go Use db.Find instead of writing methods for every object (#28084) 1 year ago