forgejo

mirror of https://codeberg.org/forgejo/forgejo.git synced 2025-03-09 16:02:06 +01:00

History

forgejo-backport-action 932afb2036 Some checks failed / release (push) Has been cancelled Details testing / backend-checks (push) Has been cancelled Details testing / frontend-checks (push) Has been cancelled Details testing / test-unit (push) Has been cancelled Details testing / test-e2e (push) Has been cancelled Details testing / test-remote-cacher (redis) (push) Has been cancelled Details testing / test-remote-cacher (valkey) (push) Has been cancelled Details testing / test-remote-cacher (garnet) (push) Has been cancelled Details testing / test-remote-cacher (redict) (push) Has been cancelled Details testing / test-mysql (push) Has been cancelled Details testing / test-pgsql (push) Has been cancelled Details testing / test-sqlite (push) Has been cancelled Details testing / security-check (push) Has been cancelled Details [v10.0/forgejo] fix: delay deleting authorization token (#6976 ) Backport: https://codeberg.org/forgejo/forgejo/pulls/6937 - `1ce33aa38d` extended the LTA table with a purpose column so it could be extended to other tokens. However some are single-use tokens and should be deleted after use. - This did not result in a good UX for activating user as they needed to also fill in their passwords and in the case that the password was incorrect the token would no longer be usable. - This patch modifies the code to allow for a little delay before deleting authorization tokens to do additional verification such as the password check. This cannot be done before the authorization token check as that the authorization token determines who the user is. - Resolves forgejo/forgejo#6912 - Adjusted existing unit test. Co-authored-by: Gusted <postmaster@gusted.xyz> Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/6976 Reviewed-by: Gusted <gusted@noreply.codeberg.org> Co-authored-by: forgejo-backport-action <forgejo-backport-action@noreply.codeberg.org> Co-committed-by: forgejo-backport-action <forgejo-backport-action@noreply.codeberg.org>		2025-02-19 07:06:01 +00:00
..
2fa.go	Move context from modules to services (#29440 )	2024-03-06 12:10:43 +08:00
auth.go	[v10.0/forgejo] fix: delay deleting authorization token (#6976 )	2025-02-19 07:06:01 +00:00
auth_test.go	Make "/user/login" page redirect if the current user has signed in (#29583 )	2024-03-11 23:36:58 +07:00
linkaccount.go	[v10.0/forgejo] fix: show internal login prompt for account linking (#6929 )	2025-02-14 13:25:46 +00:00
main_test.go	make writing main test easier (#27270 )	2023-09-28 01:38:53 +00:00
oauth.go	fix: Revert "allow synchronizing user status from OAuth2 login providers (#31572 )"	2024-12-12 05:59:06 +01:00
oauth_test.go	Use user.FullName in Oauth2 id_token response (#6071 )	2024-11-27 07:48:32 +00:00
openid.go	add CfTurnstileSitekey context data to all captcha templates (#31874 )	2024-08-25 10:47:02 +02:00
password.go	[v10.0/forgejo] fix: delay deleting authorization token (#6976 )	2025-02-19 07:06:01 +00:00
webauthn.go	[FEAT] Add support for webauthn credential level 3	2024-08-29 10:05:03 +02:00