49 Commits (7ed00b6e8d571ab8efc99aa69d545cce609dd900)

Author SHA1 Message Date
Willem van Dreumel 8947b711aa Link OAuth2 account to 2FA enabled account (fix #1050) (#1052)
* fixes #1050 where linking an account to a 2fa enabled account failed because we forgot to really link the account when 2fa is completed

* handle errors
7 years ago
Lunny Xiao 19b3c45ca7 fix 500 when use a duplicat email instead of giving an error tip (#1040) 7 years ago
Willem van Dreumel 01d957677f Oauth2 consumer (#679)
* initial stuff for oauth2 login, fails on:
* login button on the signIn page to start the OAuth2 flow and a callback for each provider
Only GitHub is implemented for now
* show login button only when the OAuth2 consumer is configured (and activated)
* create macaron group for oauth2 urls
* prevent net/http in modules (other then oauth2)
* use a new data sessions oauth2 folder for storing the oauth2 session data
* add missing 2FA when this is enabled on the user
* add password option for OAuth2 user , for use with git over http and login to the GUI
* add tip for registering a GitHub OAuth application
* at startup of Gitea register all configured providers and also on adding/deleting of new providers
* custom handling of errors in oauth2 request init + show better tip
* add ExternalLoginUser model and migration script to add it to database
* link a external account to an existing account (still need to handle wrong login and signup) and remove if user is removed
* remove the linked external account from the user his settings
* if user is unknown we allow him to register a new account or link it to some existing account
* sign up with button on signin page (als change OAuth2Provider structure so we can store basic stuff about providers)

* from gorilla/sessions docs:
"Important Note: If you aren't using gorilla/mux, you need to wrap your handlers with context.ClearHandler as or else you will leak memory!"
(we're using gorilla/sessions for storing oauth2 sessions)

* use updated goth lib that now supports getting the OAuth2 user if the AccessToken is still valid instead of re-authenticating (prevent flooding the OAuth2 provider)
7 years ago
Andrew 6dd096b7f0 Two factor authentication support (#630)
* Initial commit for 2FA support

Signed-off-by: Andrew <write@imaginarycode.com>

* Add vendored files

* Add missing depends

* A few clean ups

* Added improvements, proper encryption

* Better encryption key

* Simplify "key" generation

* Make 2FA enrollment page more robust

* Fix typo

* Rename twofa/2FA to TwoFactor

* UNIQUE INDEX -> UNIQUE
8 years ago
Bwko f27d87d93b Added minimum password length to app.ini (#223) 8 years ago
Denis Denisov 380e32e129 Fix random string generator (#384)
* Remove unused custom-alphabet feature of random string generator

Fix random string generator

Random string generator should return error if it fails to read random data via crypto/rand

* Fixes variable (un)initialization mixed assign
Update test GetRandomString
8 years ago
Lunny Xiao 94da472717 Golint fixed for modules/setting (#262)
* golint fixed for modules/setting

* typo fixed and renamed UNIXSOCKET to UnixSocket
8 years ago
Lunny Xiao cf045b029c golint fixed for parts of routers root, dev, user and org dirs (#167)
* golint fixed for parts of routers root, dev and org dirs

* add user/auth.go golint fixed

* rename unnecessary exported to unexported and user dir golint fixed
8 years ago
Thibault Meyer ddee4c8b58
Normalize files with gofmt 8 years ago
Sandro Santilli 4247304f5a Update import paths from github.com/go-gitea to code.gitea.io (#135)
- Update import paths from github.com/go-gitea to code.gitea.io
- Fix import path for travis

See https://docs.travis-ci.com/user/languages/go#Go-Import-Path
8 years ago
Joubert RedRat f91cbf0fed Support to last login feature 8 years ago
Rémy Boulanouar 2d68bd1ef9 Change import reference to match gitea instead of gogs (#37) 8 years ago
LefsFlare 2cb5ec5983 Prevented user enumeration of valid users through HTTP status codes of login (#3639) (#3654) 8 years ago
Unknwon f0b5c3b90a #3448 redirect if any after sign in 8 years ago
Unknwon 1f2e173a74 Refactor User.Id to User.ID 8 years ago
Unknwon f1b8d52eb3 #2854 fix no mail notification when issue is closed/reopened 8 years ago
Unknwon 8966f5635d Merge pull request #2823 from zacheryph/feature/local-only-password-reset
Prevent `Forgot Password` for non local users
8 years ago
Zachery Hostens 63e21c146a ensure we don’t try changing LDAP passswords 8 years ago
Unknwon b4f47a7623 #1891 attempt to fix invalid csrf token 8 years ago
Unknwon 514382e2eb Rename module: middleware -> context 8 years ago
Unknwon 7f9598141b fix #2020 9 years ago
Unknwon dc0c0dc06b fix typo for #1996 9 years ago
Unknwon 9330c943cd work on #1891 9 years ago
Unknwon 932dbccb67 fix import path, fix #1782 9 years ago
Unknwon 3fb1b6a608 drop oauth2 feature support 9 years ago
Unknwon 9d36fc6986 finish new auth e-mails 9 years ago
Unknwon 373731f5e8 user gomail and new activate account email tpl
- #1496: fallback plain text
- #1002: add date header
- #913: fix encoding of header
9 years ago
Unknwon 83e747bfda #697 and #1606 and new admin edit user UI 9 years ago
Unknwon 8e0a69f86a #697 disable captcha and new admin create user UI 9 years ago
Unknwon 47ac579f09 only assign auto-admin when sign up by web 9 years ago
Unknwon 817b48ed1e Show owner/poster tags of comments and fix #1312 9 years ago
Unknwon e50982f5ec allow anonymous SSH clone 9 years ago
Unknwon 698b9e2acc #1070 Clearer error message for illegal characters 9 years ago
Unknwon 1654e9ecab templates/user/settings/emial.tmpl: little fix on UI
- routers/user: little code format
- conf/locale: update French locale
9 years ago
无闻 a18decf4cc Merge pull request #755 from phsmit/multiple_emails
Multiple emails
10 years ago
Unknwon 57b3be4016 work on #756 10 years ago
Peter ec71d538fc Method for activating email addresses through verification email 10 years ago
Unknwon 146c8efee3 Fix API broken 10 years ago
Unknwon 3abc41ccca Fix API broken 10 years ago
Martin van Beurden 976f1486e0 Set cookiepath to AppSubUrl 10 years ago
Unknwon 7ba9257a7f Add suburl support 10 years ago
Martin van Beurden 0055cbd365 Allow Gogs to run from a suburl behind a reverse proxy. e.g. http://mydomain.com/gogs/
Conflicts:
	modules/setting/setting.go

Conflicts:
	templates/repo/release/list.tmpl
	templates/user/dashboard/dashboard.tmpl

Conflicts:
	routers/repo/setting.go
10 years ago
Unknwon 632b1b694d Fix #465 10 years ago
Unknwon bba707de36 Finish team list, create new team, join/leave team page 10 years ago
Unknwon 7af7584d25 Finish new reset password, etc. 10 years ago
Unknwon 78defd238c Page: Manage social accounts 10 years ago
Unknwon e8c9bb2c66 Finish new collaboration page 10 years ago
Unknwon 7bbf644dd5 Convert captcha, cache, csrf as middlewares 10 years ago
Unknwon 8dd07c0ddd New UI merge in progress 10 years ago