forgejo/services/context
Gusted 1ce33aa38d
fix: extend forgejo_auth_token table
- Add a `purpose` column, this allows the `forgejo_auth_token` table to
be used by other parts of Forgejo, while still enjoying the
no-compromise architecture.
- Remove the 'roll your own crypto' time limited code functions and
migrate them to the `forgejo_auth_token` table. This migration ensures
generated codes can only be used for their purpose and ensure they are
invalidated after their usage by deleting it from the database, this
also should help making auditing of the security code easier, as we're
no longer trying to stuff a lot of data into a HMAC construction.
-Helper functions are rewritten to ensure a safe-by-design approach to
these tokens.
- Add the `forgejo_auth_token` to dbconsistency doctor and add it to the
`deleteUser` function.
- TODO: Add cron job to delete expired authorization tokens.
- Unit and integration tests added.
2024-11-15 10:59:36 +01:00
..
upload Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
access_log.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
api_org.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
api_test.go Add testifylint to lint checks (#4535) 2024-07-30 19:41:10 +00:00
api.go Merge pull request 'fix: correct documentation for non 200 responses in swagger' (#5491) from JakobDev/forgejo:fixswagger into forgejo 2024-10-15 11:34:35 +00:00
base_test.go Use strict protocol check when redirect (#29642) 2024-03-11 23:36:59 +07:00
base.go Ignore useless error message "broken pipe" (#30801) 2024-05-05 12:15:40 +01:00
captcha.go [CHORE] Move cache library 2024-08-27 21:28:56 +02:00
context_cookie.go fix: extend forgejo_auth_token table 2024-11-15 10:59:36 +01:00
context_model.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
context_request.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
context_response.go Ignore useless error message "broken pipe" (#30801) 2024-05-05 12:15:40 +01:00
context_template.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
context_test.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
context.go [PORT] Refactor DateUtils and merge TimeSince (gitea#32409) 2024-11-10 22:23:27 +01:00
csrf.go Refactor CSRF protector (#32057) (fix forgejo tests) 2024-09-27 08:42:48 +02:00
org.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
package.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
pagination.go Unify search boxes (#29530) 2024-03-20 12:31:05 +00:00
permission.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
private.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
quota.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
repo.go [BUG] Allow 4 charachter SHA in /src/commit 2024-08-06 01:45:41 +02:00
repository.go feat(federation): validate like activities (#3494) 2024-05-07 07:59:49 +00:00
response.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
user.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
utils.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
xsrf_test.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
xsrf.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00