102 Commits (820e28c9044bbd9d398dd1617323665bb0935e13)

Author	SHA1	Message	Date
kolaente	0b510725c9	Feature: Archive repos (#5009)	6 years ago
silverwind	44759fd66c	Add proper CORS preflight origin validation (#5740)	6 years ago
Lunny Xiao	270fa6d63b	Support CORS headers to git smart http protocol (#5719)	6 years ago
Lunny Xiao	eabbddcd98	Restrict permission check on repositories and fix some problems (#5314) ... * fix units permission problems * fix some bugs and merge LoadUnits to repoAssignment * refactor permission struct and add some copyright heads * remove unused codes * fix routes units check * improve permission check * add unit tests for permission * fix typo * fix tests * fix some routes * fix api permission check * improve permission check * fix some permission check * fix tests * fix tests * improve some permission check * fix some permission check * refactor AccessLevel * fix bug * fix tests * fix tests * fix tests * fix AccessLevel * rename CanAccess * fix tests * fix comment * fix bug * add missing unit for test repos * fix bug * rename some functions * fix routes check	6 years ago
Najib Idrissi	b9ae16d15e	Make reverse proxy auth optional (#4643) ... * Make reverse proxy auth optional If the option ENABLE_REVERSE_PROXY_AUTHENTICATION is enabled, make reverse proxy auth optional, instead of failing if the authentication did not succeed. Fixes #3973 Signed-off-by: Najib Idrissi <najib.idrissi.kaitouni@gmail.com> * Update http.go	6 years ago
Lukas Treyer	be4ec0cbba	env var GITEA_PUSHER_EMAIL (#4516) ... * env var GITEA_PUSHER_EMAIL * set pusher email only if email address is not private	6 years ago
Lauris BH	ab5cc6f3a9	Correctly check http git access rights for reverse proxy authorized users (#3721)	7 years ago
Morgan Bazalgette	65861900cd	Handle refactor (#3339) ... * Replace all ctx.Handle with ctx.ServerError or ctx.NotFound * Change Handle(403) to NotFound, avoid using macaron's NotFound	7 years ago
Lunny Xiao	f2e20c81b6	Refactor struct's time to remove unnecessary memory usage (#3142) ... * refactor struct's time to remove unnecessary memory usage * use AsTimePtr simple code * fix tests * fix time compare * fix template on gpg * use AddDuration instead of Add	7 years ago
Lunny Xiao	35cc5b0402	Remove GetRepositoryByRef and add GetRepositoryByOwnerAndName (#3043) ... * remove GetRepositoryByRef and add GetRepositoryByOwnerAndName * fix tests * fix tests bug * some improvements	7 years ago
David Schneiderbauer	4ccb0fe338	fix .netrc authentication (#2700) ... * provide both possible authentication solutions Signed-off-by: David Schneiderbauer <dschneiderbauer@gmail.com>	7 years ago
Lunny Xiao	2ef8b8bcbe	fix go get subpackage bug (#2584) ... * fix go get subpackage bug * merge the duplicated funtions	7 years ago
Moritz Heiber	7e12aac61c	Only allow token authentication with 2FA enabled (#2184) ... * Don't allow for plain username/password authentication when 2FA is enabled * Removed debugging statement * Don't assume a token belongs to a given user, handle two-factor errors properly * Simplified user/token matching, refactored error handling for two-factor authentication * Change authentication response to avoid bruteforcing * Add TODO item as a comment for changing the response for security purposes	7 years ago
Shuanglei Tao	d389ed25a5	Fix: `http: multiple response.WriteHeader calls` (#2038) ... We can't change the http status code here, because the response has been written.	7 years ago
Lunny Xiao	6362462da8	fix admin lost permission caused by #947	8 years ago
Lunny Xiao	fd6034aaf2	Add units to team (#947) ... * add units to team * fix lint * finish team setting backend * finished permission controll on routes * fix import blank line * add unit check on ssh/http pull and push and fix test failed * fix fixtures data * remove unused code	8 years ago
Lunny Xiao	930d1759ae	Remove env user salt since no need to use (#1515) ... * remove env user salt since no need to use * remove unused variable from update.go	8 years ago
Lunny Xiao	f0db3da713	fix go get sub package and add domain on installation to let go get work defaultly (#1518) ... * fix go get sub package and add domain on installation to let go get work defaultly * fix import sequence * fix .git problem	8 years ago
Ethan Koenig	ec0ae5d50c	Refactor and fix incorrect comment (#1247)	8 years ago
Lunny Xiao	cd1821a7e2	Move push update to post-receive and protected branch check to pre-receive (#1030) ... * move all push update to git hook post-receive and protected branch check to git hook pre-receive * add SSH_ORIGINAL_COMMAND check back * remove all unused codes * fix the import	8 years ago
Willem van Dreumel	01d957677f	Oauth2 consumer (#679) ... * initial stuff for oauth2 login, fails on: * login button on the signIn page to start the OAuth2 flow and a callback for each provider Only GitHub is implemented for now * show login button only when the OAuth2 consumer is configured (and activated) * create macaron group for oauth2 urls * prevent net/http in modules (other then oauth2) * use a new data sessions oauth2 folder for storing the oauth2 session data * add missing 2FA when this is enabled on the user * add password option for OAuth2 user , for use with git over http and login to the GUI * add tip for registering a GitHub OAuth application * at startup of Gitea register all configured providers and also on adding/deleting of new providers * custom handling of errors in oauth2 request init + show better tip * add ExternalLoginUser model and migration script to add it to database * link a external account to an existing account (still need to handle wrong login and signup) and remove if user is removed * remove the linked external account from the user his settings * if user is unknown we allow him to register a new account or link it to some existing account * sign up with button on signin page (als change OAuth2Provider structure so we can store basic stuff about providers) * from gorilla/sessions docs: "Important Note: If you aren't using gorilla/mux, you need to wrap your handlers with context.ClearHandler as or else you will leak memory!" (we're using gorilla/sessions for storing oauth2 sessions) * use updated goth lib that now supports getting the OAuth2 user if the AccessToken is still valid instead of re-authenticating (prevent flooding the OAuth2 provider)	8 years ago
Denis Denisov	fd941db246	Protected branches system (#339) ... * Protected branches system * Moved default branch to branches section (`:org/:reponame/settings/branches`). * Initial support Protected Branch. - Admin does not restrict - Owner not to limit - To write permission restrictions * reformat tmpl * finished the UI and add/delete protected branch response * remove unused comment * indent all the template files and remove ru translations since we use crowdin * fix the push bug	8 years ago
Bo-Yi Wu	6510e57758	fix gofmt error ... Signed-off-by: Bo-Yi Wu <appleboy.tw@gmail.com>	8 years ago
Gogs	37eec6c9b7	push + pull now works with reverse proxy + basic auth on apache 2.4	8 years ago
Lunny Xiao	47a7529d96	update code.gitea.io/git (#450)	8 years ago
Lunny Xiao	3917ed45de	golint fixed for routers (#208)	8 years ago
Sandro Santilli	4247304f5a	Update import paths from github.com/go-gitea to code.gitea.io (#135) ... - Update import paths from github.com/go-gitea to code.gitea.io - Fix import path for travis See https://docs.travis-ci.com/user/languages/go#Go-Import-Path	8 years ago
Sandro Santilli	f388661bda	ACCESS_MODE_* -> AccessMode*	8 years ago
Sandro Santilli	6e4252dad4	Replace gogits/git-module dependency with go-gitea/git (#94) ... * Replace gogits/git-module dependency with go-gitea/git Fixes #92 * Remove git alias for git module import (not needed)	8 years ago
Rémy Boulanouar	2d68bd1ef9	Change import reference to match gitea instead of gogs (#37)	8 years ago
Thibault Meyer	93f1eabe30	rename variable + fix wiki link	8 years ago
Thibault Meyer	9d66497abc	Can disable GIT interactions by HTTP protocol	8 years ago
Unknwon	a00c932bbc	General code quality improvement	8 years ago
Unknwon	dccb0c15b9	Replace convert.To with APIFormat calls	8 years ago
Unknwon	3f7f4852ef	#2246 fully support of webhooks for pull request	8 years ago
Unknwon	1f2e173a74	Refactor User.Id to User.ID	8 years ago
Franz Schmidt	8b35c194ec	Fixes #3110 (#3136)	9 years ago
Unknwon	c041273dd3	repo/http: clean code	9 years ago
Unknwon	60ae8ac3d2	Add route for #2846	9 years ago
Unknwon	514382e2eb	Rename module: middleware -> context	9 years ago
Unknwon	338af89d56	#2650 fix possbility that use email as pusher user name ... Remove the possibility of using email as user name when user actually push through combination of email and password with HTTP. Also refactor update action function to replcae tons of arguments with single PushUpdateOptions struct. And define the user who pushes code as pusher, therefore variable names shouldn't be confusing any more.	9 years ago
Florian Kaiser	0e4ae27caa	Use pretty 404 pages in repo.HTTPBackend	9 years ago
zhuharev	0d5dc8a064	typo fix	9 years ago
Unknwon	a62290de52	#2311 improve HTTP auth error message	9 years ago
Unknwon	40f3142264	#2114 External URL for wiki	9 years ago
Unknwon	830d000667	finish wiki	9 years ago
Unknwon	c50a3503e6	introduce git-shell	9 years ago
Unknwon	0128036514	#1681 some fixes for builtin SSH server on Windows	9 years ago
Unknwon	b55499d039	go vet and fix #1890	9 years ago
Unknwon	0fbb8c8826	New push to head repo of head branch: regenerate patch and retest apply	9 years ago