1
0
Fork 0
mirror of https://codeberg.org/forgejo/forgejo.git synced 2024-12-23 12:59:11 -05:00
forgejo/models/auth
Gusted 1ce33aa38d
fix: extend forgejo_auth_token table
- Add a `purpose` column, this allows the `forgejo_auth_token` table to
be used by other parts of Forgejo, while still enjoying the
no-compromise architecture.
- Remove the 'roll your own crypto' time limited code functions and
migrate them to the `forgejo_auth_token` table. This migration ensures
generated codes can only be used for their purpose and ensure they are
invalidated after their usage by deleting it from the database, this
also should help making auditing of the security code easier, as we're
no longer trying to stuff a lot of data into a HMAC construction.
-Helper functions are rewritten to ensure a safe-by-design approach to
these tokens.
- Add the `forgejo_auth_token` to dbconsistency doctor and add it to the
`deleteUser` function.
- TODO: Add cron job to delete expired authorization tokens.
- Unit and integration tests added.
2024-11-15 10:59:36 +01:00
..
TestOrphanedOAuth2Applications [BUG] Don't remove builtin OAuth2 applications 2024-04-06 01:07:45 +02:00
access_token.go Use db.Find instead of writing methods for every object (#28084) 2023-11-24 03:49:41 +00:00
access_token_scope.go [GITEA] silently ignore obsolete sudo scope 2024-02-05 16:05:50 +01:00
access_token_scope_test.go [GITEA] silently ignore obsolete sudo scope 2024-02-05 16:05:50 +01:00
access_token_test.go Add testifylint to lint checks (#4535) 2024-07-30 19:41:10 +00:00
auth_token.go fix: extend forgejo_auth_token table 2024-11-15 10:59:36 +01:00
main_test.go tests: improve actvititypub integration test code 2024-11-01 22:39:49 +01:00
oauth2.go chore: use errors.New to replace fmt.Errorf with no parameters will much better (#30621) 2024-04-28 15:39:00 +02:00
oauth2_list.go Use db.Find instead of writing methods for every object (#28084) 2023-11-24 03:49:41 +00:00
oauth2_test.go Fix linting issues 2024-08-18 16:25:13 +02:00
session.go Fix session key conflict with database keyword (#28613) 2023-12-27 15:24:23 +08:00
session_test.go Add testifylint to lint checks (#4535) 2024-07-30 19:41:10 +00:00
source.go allow synchronizing user status from OAuth2 login providers (#31572) 2024-07-22 15:44:13 +02:00
source_test.go Add testifylint to lint checks (#4535) 2024-07-30 19:41:10 +00:00
twofactor.go [GITEA] Drop sha256-simd in favor of stdlib 2024-02-05 16:09:40 +01:00
webauthn.go [FEAT] Add support for webauthn credential level 3 2024-08-29 10:05:03 +02:00
webauthn_test.go [FEAT] Add support for webauthn credential level 3 2024-08-29 10:05:03 +02:00