5 commits

Author	SHA1	Message	Date
Gusted	e6bbecb02d	fix: disallow basic authorization when security keys are enrolled ... - This unifies the security behavior of enrolling security keys with enrolling TOTP as a 2FA method. When TOTP is enrolled, you cannot use basic authorization (user:password) to make API request on behalf of the user, this is now also the case when you enroll security keys. - The usage of access tokens are the only method to make API requests on behalf of the user when a 2FA method is enrolled for the user. - Integration test added.	2024-11-15 10:59:36 +01:00
TheFox0x7	4de909747b	Add testifylint to lint checks (#4535) ... go-require lint is ignored for now Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/4535 Reviewed-by: Gusted <gusted@noreply.codeberg.org> Co-authored-by: TheFox0x7 <thefox0x7@gmail.com> Co-committed-by: TheFox0x7 <thefox0x7@gmail.com>	2024-07-30 19:41:10 +00:00
Loïc Dachary	e57504f278	[BRANDING] X-Forgejo-OTP can be used instead of X-Gitea-OTP ... (cherry picked from commit 7b0549cd70) (cherry picked from commit 13e10a65d9) (cherry picked from commit 65bdd73cf2) (cherry picked from commit 64eba8bb92) (cherry picked from commit 4c49b1a759) (cherry picked from commit 93b4d06406) (cherry picked from commit e2bc5f36d9) (cherry picked from commit 2bee76f9df) (cherry picked from commit 3d8a1b4a9f) (cherry picked from commit 99dd092cd0) (cherry picked from commit 0fdbd02204) (cherry picked from commit 70b277a183) (cherry picked from commit 3eece7fbb4) (cherry picked from commit 4838fc9e11) (cherry picked from commit b76ed541cf) (cherry picked from commit dcdfb5b65c) (cherry picked from commit 377dc48cdc) (cherry picked from commit acc862f411) (cherry picked from commit ac75ef101f) (cherry picked from commit 08f2d9f7c5) (cherry picked from commit e4096f0b64) (cherry picked from commit bf5876f062) (cherry picked from commit 7dc60637e5) (cherry picked from commit ef3101774b) (cherry picked from commit ecb9e8867c) (cherry picked from commit 64f0ae72fe) (cherry picked from commit 8dd6ec7862) (cherry picked from commit b36723e52b) Conflicts: modules/context/api.go https://codeberg.org/forgejo/forgejo/pulls/1466 (cherry picked from commit 5c378e0cb8) (cherry picked from commit 1d87602819) (cherry picked from commit 0f72002d66) (cherry picked from commit da2556eb13) (cherry picked from commit c01688cd90) (cherry picked from commit af4bba8329) (cherry picked from commit 33ca322c2e) Conflicts: modules/context/api.go https://codeberg.org/forgejo/forgejo/pulls/1739 (cherry picked from commit c18e374d44) (cherry picked from commit 27c4797c9f) (cherry picked from commit 46588e0fea) (cherry picked from commit b8a02ef220) (cherry picked from commit 05e2f49b78) (cherry picked from commit e4df86d312) (cherry picked from commit f36e06da43) (cherry picked from commit 64d336c287) (cherry picked from commit 2af1cbb017) (cherry picked from commit 920741a9d6) (cherry picked from commit 6cbb37c8c4) (cherry picked from commit 539cceca39)	2024-02-05 16:05:01 +01:00
KN4CK3R	838db2f891	Convert to url auth to header auth in tests (#28484) ... Related #28390	2023-12-21 23:59:59 +00:00
KN4CK3R	4f4fea734c	Unify two factor check (#27915) ... Fixes #27819 We have support for two factor logins with the normal web login and with basic auth. For basic auth the two factor check was implemented at three different places and you need to know that this check is necessary. This PR moves the check into the basic auth itself.	2023-11-06 08:22:39 +00:00