forgejo.dev/forgejo
2
0
Fork 0
mirror of https://codeberg.org/forgejo/forgejo.git synced 2024-07-31 04:12:37 +00:00
Code Issues Packages Projects Releases Wiki Activity
forgejo/services
History
Gusted eff097448b
[GITEA] rework long-term authentication 
- The current architecture is inherently insecure, because you can
construct the 'secret' cookie value with values that are available in
the database. Thus provides zero protection when a database is
dumped/leaked.
- This patch implements a new architecture that's inspired from: [Paragonie Initiative](https://paragonie.com/blog/2015/04/secure-authentication-php-with-long-term-persistence#secure-remember-me-cookies).
- Integration testing is added to ensure the new mechanism works.
- Removes a setting, because it's not used anymore.
2023-10-05 08:03:27 +02:00
..
actions Add a new column schedule_id for action_run to track (#26975) 2023-09-08 23:01:19 +08:00
agit Move notification interface to services layer (#26915) 2023-09-05 18:37:47 +00:00
asymkey make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00
attachment [FEAT] allow setting the update date on issues and comments 2023-10-02 17:06:23 +02:00
auth [GITEA] rework long-term authentication 2023-10-05 08:03:27 +02:00
automerge Improve queue and logger context (#24924) 2023-05-26 07:31:55 +00:00
context Another round of db.DefaultContext refactor (#27103) 2023-09-25 13:17:37 +00:00
convert [FEAT] add Forgero Git Service 2023-10-02 17:06:23 +02:00
cron [GITEA] Show manual cron run's last time 2023-10-02 19:00:59 +02:00
externalaccount More db.DefaultContext refactor (#27265) 2023-09-29 12:12:54 +00:00
feed More db.DefaultContext refactor (#27265) 2023-09-29 12:12:54 +00:00
forgejo [v1.22] [UPGRADE] run sanity checks before the database is upgraded 2023-10-02 17:14:30 +02:00
forms Add support for forking single branch (#25821) 2023-09-29 09:48:39 +08:00
gitdiff make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00
indexer Update status and code index after changing the default branch (#27018) 2023-09-13 04:43:31 +00:00
issue [FEAT] allow setting the update date on issues and comments 2023-10-02 17:06:23 +02:00
lfs [GITEA] Drop sha256-simd in favor of stdlib 2023-10-02 19:28:45 +02:00
mailer [GITEA] Drop sha256-simd in favor of stdlib 2023-10-02 19:28:45 +02:00
markup make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00
migrations [GITEA] Skip unsupported code comment 2023-10-02 19:23:42 +02:00
mirror More db.DefaultContext refactor (#27265) 2023-09-29 12:12:54 +00:00
notify [GITEA] notifies admins on new user registration (squash) cosmetic changes 2023-10-02 19:27:46 +02:00
org make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00
packages Another round of db.DefaultContext refactor (#27103) 2023-09-25 13:17:37 +00:00
pull More db.DefaultContext refactor (#27265) 2023-09-29 12:12:54 +00:00
release make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00
repository Add support for forking single branch (#25821) 2023-09-29 09:48:39 +08:00
secrets Refactor secrets modification logic (#26873) 2023-09-05 15:21:02 +00:00
task Fix unexpected context canceled when migrating repository (#27368) 2023-10-01 12:04:35 +00:00
uinotification More db.DefaultContext refactor (#27265) 2023-09-29 12:12:54 +00:00
user make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00
webhook [GITEA] Drop sha256-simd in favor of stdlib 2023-10-02 19:28:45 +02:00
wiki make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00