c6c829fe3f
Enhanced auth token / remember me ( #27606 )
...
Closes #27455
> The mechanism responsible for long-term authentication (the 'remember
me' cookie) uses a weak construction technique. It will hash the user's
hashed password and the rands value; it will then call the secure cookie
code, which will encrypt the user's name with the computed hash. If one
were able to dump the database, they could extract those two values to
rebuild that cookie and impersonate a user. That vulnerability exists
from the date the dump was obtained until a user changed their password.
>
> To fix this security issue, the cookie could be created and verified
using a different technique such as the one explained at
https://paragonie.com/blog/2015/04/secure-authentication-php-with-long-term-persistence#secure-remember-me-cookies .
The PR removes the now obsolete setting `COOKIE_USERNAME`.
1 year ago
ee6a390675
[skip ci] Updated translations via Crowdin
1 year ago
3e9a379d38
[skip ci] Updated translations via Crowdin
1 year ago
d020343269
[skip ci] Updated translations via Crowdin
1 year ago
50166d1f7c
[skip ci] Updated translations via Crowdin
1 year ago
4aae15af7a
[skip ci] Updated translations via Crowdin
1 year ago
f40538e667
Remove unnecessary desc for openssh key cron task ( #27515 )
1 year ago
4bde16e1ba
[skip ci] Updated translations via Crowdin
1 year ago
68b3fe88d5
[skip ci] Updated translations via Crowdin
1 year ago
6cdeb7798b
[skip ci] Updated translations via Crowdin
1 year ago
9f8d59858a
Refactor system setting ( #27000 )
...
This PR reduces the complexity of the system setting system.
It only needs one line to introduce a new option, and the option can be
used anywhere out-of-box.
It is still high-performant (and more performant) because the config
values are cached in the config system.
1 year ago
976d1760ac
[skip ci] Updated translations via Crowdin
1 year ago
b37f3332f1
[skip ci] Updated translations via Crowdin
1 year ago
e709bc199f
Differentiate between `push` and `pull` `mirror sync in progress` ( #27390 )
...
Previously, if you had both a push and a pull mirror, the message did
not clarify if you've accidentally synchronized the wrong one.
Additionally fixed two typos that were encountered while debugging.
## Screenshots
1 year ago
33de64cb21
link to file from its history ( #27354 )
...
Fixes #3852
Fixes https://github.com/go-gitea/gitea/issues/26707
Add a button on file history which directs you to the file at the
selected commit.
Co-authored-by: silverwind <me@silverwind.io>
1 year ago
50070550a8
Hide archived labels when filtering by labels on the issue list ( #27115 )
...
Followup https://github.com/go-gitea/gitea/pull/26820
## Archived labels UI for issue filter and issue filter actions for
issues/pull request pages.
Changed:
* Enhanced the Issue filter and Issue filter actions UI page to
seamlessly incorporate a list of archived labels.
* Pagination functionality is same as before. If archived label checkbox
is checked then we are adding a query string`archived=true` in the url
to save the state of page.
* Issue filter actions menu is separated into different template.
* Adding the archived flag in issue url labels.
* Pull Request page is also work the same.
Outsourced:
* Defer the implementation of specialized handling for archived labels
to upcoming pull requests. This step will be undertaken subsequent to
the successful merge of this pull request.
Screenshots
### Issue page
<img width="1360" alt="image"
src="https://github.com/go-gitea/gitea/assets/80308335/d7efb2ef-5b2b-449d-83f0-d430a32ec432 ">
### Issue page with label filter on archived label checkbox when not
checked --> No archived label is there in list
<img width="1249" alt="image"
src="https://github.com/go-gitea/gitea/assets/80308335/ceea68ef-91f2-4693-910f-2e25e236bfc9 ">
### Issue page with label filter on archived label checkbox when checked
--> Show archived label in the list.
<img width="710" alt="image"
src="https://github.com/go-gitea/gitea/assets/80308335/2414d26b-2079-4c3c-bd9e-f2f5411bcabf ">
### Issue page with label filter on issue action menu on archived label
checkbox when checked --> Show archived label in the list.
<img width="409" alt="image"
src="https://github.com/go-gitea/gitea/assets/80308335/259cac87-3e21-4778-99a2-a6a0b8c81178 ">
### Applied the archived=true in Issue labels when archived checkbox is
checked.
<img width="984" alt="image"
src="https://github.com/go-gitea/gitea/assets/80308335/657ce3db-c0ae-402e-b12d-3b580d3c2ed0 ">
---
Part of https://github.com/go-gitea/gitea/issues/25237
---------
Signed-off-by: puni9869 <punitinani1@hotmail.com>
Co-authored-by: delvh <dev.lh@web.de>
Co-authored-by: Giteabot <teabot@gitea.io>
1 year ago
4f169e4b47
[skip ci] Updated translations via Crowdin
1 year ago
c3b7231966
Add protected branch name description ( #27257 )
...
Co-authored-by: delvh <dev.lh@web.de>
1 year ago
3945c26722
Improve tree not found page ( #26570 )
...
Before:
After:
In Github:
https://github.com/yp05327/test/blob/main/test.drawio
Updated:
UI changed
---------
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
Co-authored-by: delvh <dev.lh@web.de>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
1 year ago
5e02e3b7ee
Add support for forking single branch ( #25821 )
...
Fixes #25117
Add UI for choosing branch to fork
Change default branch on single-branch forks
---------
Co-authored-by: Denys Konovalov <kontakt@denyskon.de>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
1 year ago
e8840e7e2b
[skip ci] Updated translations via Crowdin
1 year ago
e74a3b18af
[skip ci] Updated translations via Crowdin
1 year ago
3f82ca38af
[skip ci] Updated translations via Crowdin
1 year ago
e6d8b14620
Disable `Test Delivery` and `Replay` webhook buttons when webhook is inactive ( #27211 )
...
These buttons are now disabled when the webhook is not active.
The buttons were always enabled before this change.
- Fixes #26824
- Replaces #26814
# Before
# After
Signed-off-by: Yarden Shoham <git@yardenshoham.com>
1 year ago
c2eed61329
[skip ci] Updated translations via Crowdin
1 year ago
63b25e816d
fix issues on action runners page ( #27226 )
...
- switch from some weird status badge to label
- translate untranslated `Reset registration token` string
- change documentation link from act_runner README to Gitea Docs site
- fix "No runners available" message width
- use `ctx.Locale.Tr` where possible
1 year ago
383edf2fd7
[skip ci] Updated translations via Crowdin
1 year ago
2001ffee3f
[skip ci] Updated translations via Crowdin
1 year ago
a50d9af876
Display archived labels specially when listing labels ( #26820 )
...
Follow up https://github.com/go-gitea/gitea/pull/26741
Changes:
Added archived label for org labels and added into issue filter list.
Part of https://github.com/go-gitea/gitea/issues/25237
---------
Signed-off-by: puni9869 <punitinani1@hotmail.com>
Co-authored-by: silverwind <me@silverwind.io>
1 year ago
47b878858a
Search branches ( #27055 )
...
Resolve #25233
<img width="1315" alt="图片"
src="https://github.com/go-gitea/gitea/assets/81045/3ba59b58-471a-4e1b-985c-87edac2268c0 ">
<img width="1297" alt="图片"
src="https://github.com/go-gitea/gitea/assets/81045/b6caa12f-323b-4f70-9c44-ef91cb71a26c ">
1 year ago
ea83c0647c
[skip ci] Updated translations via Crowdin
1 year ago
ed64f1c2b8
Support `.git-blame-ignore-revs` file ( #26395 )
...
Closes #26329
This PR adds the ability to ignore revisions specified in the
`.git-blame-ignore-revs` file in the root of the repository.
The banner is displayed in this case. I intentionally did not add a UI
way to bypass the ignore file (same behaviour as Github) but you can add
`?bypass-blame-ignore=true` to the url manually.
---------
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
1 year ago
684ab403aa
[skip ci] Updated translations via Crowdin
1 year ago
f8a1094406
[skip ci] Updated translations via Crowdin
1 year ago
198a9ca635
Display all user types and org types on admin management UI ( #27050 )
...
Follow #24026
<img width="1049" alt="图片"
src="https://github.com/go-gitea/gitea/assets/81045/d3fc5159-b5e7-411a-b6f8-4a111a027e6b ">
---------
Co-authored-by: delvh <dev.lh@web.de>
1 year ago
d0318c4ae0
[skip ci] Updated translations via Crowdin
1 year ago
7d56459c6c
[skip ci] Updated translations via Crowdin
1 year ago
f599814001
[skip ci] Updated translations via Crowdin
1 year ago
148c9c4b05
[skip ci] Updated translations via Crowdin
1 year ago
a20e0affba
[skip ci] Updated translations via Crowdin
1 year ago
049b9f3718
[skip ci] Updated translations via Crowdin
1 year ago
9c0a3532a4
Add a new column schedule_id for action_run to track ( #26975 )
...
Fix #26971
And the UI now will display it's scheduled but not triggered by a push.
<img width="954" alt="图片"
src="https://github.com/go-gitea/gitea/assets/81045/d211845c-457e-4c3e-af1f-a0d654d3f365 ">
1 year ago
6cbbd51ad4
[skip ci] Updated translations via Crowdin
1 year ago
f20e317d6d
Improve hint when uploading a too large avatar ( #26935 )
...
Fix #26390
---------
Co-authored-by: delvh <dev.lh@web.de>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
Co-authored-by: Giteabot <teabot@gitea.io>
Co-authored-by: silverwind <me@silverwind.io>
1 year ago
9860dba566
[skip ci] Updated translations via Crowdin
1 year ago
460a2b0edf
Artifacts retention and auto clean up ( #26131 )
...
Currently, Artifact does not have an expiration and automatic cleanup
mechanism, and this feature needs to be added. It contains the following
key points:
- [x] add global artifact retention days option in config file. Default
value is 90 days.
- [x] add cron task to clean up expired artifacts. It should run once a
day.
- [x] support custom retention period from `retention-days: 5` in
`upload-artifact@v3`.
- [x] artifacts link in actions view should be non-clickable text when
expired.
1 year ago
31c92d9695
Add missing translation ( #26926 )
...
Fix #26923
1 year ago
c17fd68be7
Show queue's active worker number ( #26896 )
1 year ago
9881b8a4e2
Add more descriptive error on forgot password page ( #26848 )
...
## Changes
- Forces flashed error to render immediately when forgot password code
is incorrect or has expired.
- Adds a link back to the `forgot_password` page so that the user can
restart the process (in the event that their link has expired)
1 year ago
3ff81d38d8
[skip ci] Updated translations via Crowdin
1 year ago
KN4CK3R
GiteaBot
Lunny Xiao
wxiaoguang
delvh
Denys Konovalov
puni9869
yp05327
Dmitry Sharshakov
Yarden Shoham
FuXiaoHei
Jack Hay