KN4CK3R and Lunny Xiao
6b1cd2beeb
Add Arch package registry ( #111 )
...
Docs for https://github.com/go-gitea/gitea/pull/32692
Close #47
Co-authored-by: Lunny Xiao <[email protected] https://gitea.com/gitea/docs/pulls/111
Reviewed-by: Lunny Xiao <[email protected] [email protected] [email protected]
2024-12-07 04:15:16 +00:00
KN4CK3R and Lauris BH
44670a098f
Add user blocking ( #29028 )
...
Fixes #17453
This PR adds the abbility to block a user from a personal account or
organization to restrict how the blocked user can interact with the
blocker. The docs explain what's the consequence of blocking a user.
Screenshots:
---------
Co-authored-by: Lauris BH <[email protected]
2024-03-04 08:16:03 +00:00
KN4CK3R and Yarden Shoham
81ee540d05
Add io.Closer guidelines ( #29387 )
...
Co-authored-by: Yarden Shoham <[email protected]
2024-02-25 13:05:23 +00:00
KN4CK3R and 6543
c42b73e350
Add must-change-password cli parameter ( #27626 )
...
This PR adds a new `must-change-password` parameter to the
`change-password` cli command.
We already have the `must-change-password` command but it feels natural
to have this integrated into the `change-password` cli command.
---------
Co-authored-by: 6543 <[email protected]
2024-02-03 19:53:27 +02:00
KN4CK3R
2e821366c4
Fix some RPM registry flaws ( #28782 )
...
Related #26984
(https://github.com/go-gitea/gitea/pull/26984#issuecomment-1889588912 )
Fix admin cleanup message.
Fix models `Get` not respecting default values.
Rebuild RPM repository files after cleanup.
Do not add RPM group to package version name.
Force stable sorting of Alpine/Debian/RPM repository data.
Fix missing deferred `Close`.
Add tests for multiple RPM groups.
Removed non-cached `ReplaceAllStringRegex`.
If there are multiple groups available, it's stated in the package
installation screen:
2024-01-19 11:37:10 +00:00
KN4CK3R
d1e0a6ead1
Enhanced auth token / remember me ( #27606 )
...
Closes #27455
> The mechanism responsible for long-term authentication (the 'remember
me' cookie) uses a weak construction technique. It will hash the user's
hashed password and the rands value; it will then call the secure cookie
code, which will encrypt the user's name with the computed hash. If one
were able to dump the database, they could extract those two values to
rebuild that cookie and impersonate a user. That vulnerability exists
from the date the dump was obtained until a user changed their password.
>
> To fix this security issue, the cookie could be created and verified
using a different technique such as the one explained at
https://paragonie.com/blog/2015/04/secure-authentication-php-with-long-term-persistence#secure-remember-me-cookies .
The PR removes the now obsolete setting `COOKIE_USERNAME`.
2023-10-14 00:56:41 +00:00
KN4CK3R and wxiaoguang
197f9da1cd
Add docs section for sub-paths with the container registry ( #27505 )
...
Fixes #21092
suggested by
https://github.com/go-gitea/gitea/issues/21092#issuecomment-1749965397
---------
Co-authored-by: wxiaoguang <[email protected]
2023-10-09 12:45:41 +08:00
KN4CK3R and wxiaoguang
3d9602c89b
Support .git-blame-ignore-revs file ( #26395 )
...
Closes #26329
This PR adds the ability to ignore revisions specified in the
`.git-blame-ignore-revs` file in the root of the repository.
The banner is displayed in this case. I intentionally did not add a UI
way to bypass the ignore file (same behaviour as Github) but you can add
`?bypass-blame-ignore=true` to the url manually.
---------
Co-authored-by: wxiaoguang <[email protected]
2023-09-16 17:42:34 +00:00
KN4CK3R
5ba7651376
Add CRAN package registry ( #22331 )
...
This PR adds a [CRAN](https://cran.r-project.org/ ) package registry.
2023-05-22 10:57:49 +08:00
KN4CK3R
7ea4d28287
Add Go package registry ( #24687 )
...
Fixes #7608
This PR adds a Go package registry usable with the Go proxy protocol.
2023-05-14 23:38:40 +08:00
21abdd3ebe
Add Alpine package registry ( #23714 )
...
This PR adds an Alpine package registry. You can follow [this
tutorial](https://wiki.alpinelinux.org/wiki/Creating_an_Alpine_package )
to build a *.apk package for testing.
This functionality is similar to the Debian registry (#22854 ) and
therefore shares some methods. I marked this PR as blocked because it
should be merged after #22854 .
---------
Co-authored-by: techknowlogick <[email protected] [email protected] [email protected]
2023-05-12 17:27:50 +00:00
KN4CK3R
0ba4771477
Add RPM registry ( #23380 )
...
Fixes #20751
This PR adds a RPM package registry. You can follow [this
tutorial](https://opensource.com/article/18/9/how-build-rpm-packages ) to
build a *.rpm package for testing.
This functionality is similar to the Debian registry (#22854 ) and
therefore shares some methods. I marked this PR as blocked because it
should be merged after #22854 .
2023-05-05 20:33:37 +00:00
782feb471c
Add Debian package registry ( #24426 )
...
Co-authored-by: @awkwardbunny
This PR adds a Debian package registry.
You can follow [this
tutorial](https://www.baeldung.com/linux/create-debian-package ) to build
a *.deb package for testing.
Source packages are not supported at the moment and I did not find
documentation of the architecture "all" and how these packages should be
treated.
Part of #20751 .
Revised copy of #22854 .
---------
Co-authored-by: Brian Hong <[email protected] [email protected] [email protected]
2023-05-02 12:31:35 -04:00
502d07321b
Add Debian package registry ( #22854 )
...
Co-authored-by: @awkwardbunny
This PR adds a Debian package registry. You can follow [this
tutorial](https://www.baeldung.com/linux/create-debian-package ) to build
a *.deb package for testing. Source packages are not supported at the
moment and I did not find documentation of the architecture "all" and
how these packages should be treated.
---------
Co-authored-by: Brian Hong <[email protected] [email protected]
2023-04-28 17:51:36 -04:00
KN4CK3R
5064110bf7
Add Swift package registry ( #22404 )
...
This PR adds a [Swift](https://www.swift.org/ ) package registry.
2023-03-13 15:28:39 -05:00
KN4CK3R
76665e0c7b
Add user webhooks ( #21563 )
...
Currently we can add webhooks for organizations but not for users. This
PR adds the latter. You can access it from the current users settings.
2023-03-10 08:28:32 -06:00
KN4CK3R and Lunny Xiao
8d2b2f30c0
Map OIDC groups to Orgs/Teams ( #21441 )
...
Fixes #19555
Test-Instructions:
https://github.com/go-gitea/gitea/pull/21441#issuecomment-1419438000
This PR implements the mapping of user groups provided by OIDC providers
to orgs teams in Gitea. The main part is a refactoring of the existing
LDAP code to make it usable from different providers.
Refactorings:
- Moved the router auth code from module to service because of import
cycles
- Changed some model methods to take a `Context` parameter
- Moved the mapping code from LDAP to a common location
I've tested it with Keycloak but other providers should work too. The
JSON mapping format is the same as for LDAP.
---------
Co-authored-by: Lunny Xiao <[email protected]
2023-02-08 14:44:42 +08:00
KN4CK3R and Lunny Xiao
9cfc1f1f71
Add Chef package registry ( #22554 )
...
This PR implements a [Chef registry](https://chef.io/ ) to manage
cookbooks. This package type was a bit complicated because Chef uses RSA
signed requests as authentication with the registry.
Co-authored-by: Lunny Xiao <[email protected]
2023-02-06 09:49:21 +08:00
KN4CK3R and Lunny Xiao
03cf595e7e
Add Cargo package registry ( #21888 )
...
This PR implements a [Cargo registry](https://doc.rust-lang.org/cargo/ )
to manage Rust packages. This package type was a little bit more
complicated because Cargo needs an additional Git repository to store
its package index.
Screenshots:
---------
Co-authored-by: Lunny Xiao <[email protected]
2023-02-05 18:12:31 +08:00
KN4CK3R
de201adc47
Add Conda package registry ( #22262 )
...
This PR adds a [Conda](https://conda.io/ ) package registry.
2023-02-01 12:30:39 -06:00
KN4CK3R and Lunny Xiao
9a01cc66dd
Add user secrets ( #22191 )
...
Fixes #22183
Replaces #22187
This PR adds secrets for users. I refactored the files for organizations
and repos to use the same logic and templates. I splitted the secrets
from deploy keys again and reverted the fix from #22187 .
---------
Co-authored-by: Lunny Xiao <[email protected]
2023-02-01 20:53:04 +08:00
KN4CK3R and zeripath
a884069cc5
Use --index-url in PyPi description ( #22620 )
...
Fixes #22616
Co-authored-by: zeripath <[email protected]
2023-01-27 15:12:18 +01:00
61f2cce080
Add support for incoming emails ( #22056 )
...
closes #13585
fixes #9067
fixes #2386
ref #6226
ref #6219
fixes #745
This PR adds support to process incoming emails to perform actions.
Currently I added handling of replies and unsubscribing from
issues/pulls. In contrast to #13585 the IMAP IDLE command is used
instead of polling which results (in my opinion 😉 ) in cleaner code.
Procedure:
- When sending an issue/pull reply email, a token is generated which is
present in the Reply-To and References header.
- IMAP IDLE waits until a new email arrives
- The token tells which action should be performed
A possible signature and/or reply gets stripped from the content.
I added a new service to the drone pipeline to test the receiving of
incoming mails. If we keep this in, we may test our outgoing emails too
in future.
Co-authored-by: silverwind <[email protected] [email protected]
2023-01-14 23:57:10 +08:00
KN4CK3R
2ad1f40db9
Fix typo in sidebar ( #21934 )
...
Same as #21922
I used the npm file as template which was a bad idea to spot these
casing errors...
2022-11-25 17:52:23 +08:00
KN4CK3R
595d00f63f
Fix typo in sidebar ( #21922 )
2022-11-24 18:31:32 +08:00
KN4CK3R and Lunny Xiao
c8cc1318bf
Add package registry cleanup rules ( #21658 )
...
Fixes #20514
Fixes #20766
Fixes #20631
This PR adds Cleanup Rules for the package registry. This allows to
delete unneeded packages automatically. Cleanup rules can be set up from
the user or org settings.
Please have a look at the documentation because I'm not a native english
speaker.
Rule Form
Rule List
Rule Preview
Co-authored-by: Lunny Xiao <[email protected]
2022-11-20 16:08:38 +02:00
d81d49df0e
Add package registry quota limits ( #21584 )
...
Related #20471
This PR adds global quota limits for the package registry. Settings for
individual users/orgs can be added in a seperate PR using the settings
table.
Co-authored-by: Lauris BH <[email protected] [email protected]
2022-11-09 14:34:27 +08:00
3d0c2eeded
Add support for Chocolatey/NuGet v2 API ( #21393 )
...
Fixes #21294
This PR adds support for NuGet v2 API.
Co-authored-by: Lauris BH <[email protected] [email protected]
2022-10-13 18:19:39 +08:00
8289def32d
Add support for Vagrant packages ( #20930 )
...
* Add support for Vagrant boxes.
* Add authentication.
* Add tests.
* Add integration tests.
* Add docs.
* Add icons.
* Update routers/api/packages/api.go
Co-authored-by: Lauris BH <[email protected] [email protected]
2022-08-29 15:04:45 +08:00
5b3873c505
Add support for NuGet API keys ( #20721 )
...
* Add support for NuGet API key.
* lint
* Apply suggestions from code review
Co-authored-by: delvh <[email protected] [email protected] [email protected] [email protected]
2022-08-09 17:36:49 +03:00
KN4CK3R
a7d2cf3bc2
Add support for npm unpublish ( #20688 )
2022-08-09 15:23:43 +08:00
47f4e99e98
Allow multiple files in generic packages ( #20661 )
...
* Allow multiple files in generic packages.
* Add deletion of a single file.
* Update docs.
* Change version check.
Co-authored-by: silverwind <[email protected] [email protected]
2022-08-09 12:39:24 +08:00
KN4CK3R and Lunny Xiao
e470e2c529
Update maven deploy docs ( #20691 )
...
Co-authored-by: Lunny Xiao <[email protected]
2022-08-07 21:58:03 +08:00
1461afa7eb
Add support for Pub packages ( #20560 )
...
* Added support for Pub packages.
* Update docs/content/doc/packages/overview.en-us.md
Co-authored-by: Gergely Nagy <[email protected] [email protected] [email protected] [email protected]
2022-08-07 18:09:54 +08:00
KN4CK3R
59d53daec1
Update login methods in package docs ( #20561 )
2022-07-31 15:41:25 +02:00
3e0ffb8efd
Allow package dump skipping ( #19506 )
...
* Added addReader to support verbose.
* Allow skipping packages.
* Updated docs.
* Update cmd/dump.go
Co-authored-by: wxiaoguang <[email protected] [email protected] [email protected]
2022-04-26 16:30:51 -04:00
KN4CK3R
07031dafd8
Add Helm Chart registry ( #19406 )
2022-04-19 12:55:35 -04:00
4b4bd9b852
Add Package Registry ( #16510 )
...
* Added package store settings.
* Added models.
* Added generic package registry.
* Added tests.
* Added NuGet package registry.
* Moved service index to api file.
* Added NPM package registry.
* Added Maven package registry.
* Added PyPI package registry.
* Summary is deprecated.
* Changed npm name.
* Sanitize project url.
* Allow only scoped packages.
* Added user interface.
* Changed method name.
* Added missing migration file.
* Set page info.
* Added documentation.
* Added documentation links.
* Fixed wrong error message.
* Lint template files.
* Fixed merge errors.
* Fixed unit test storage path.
* Switch to json module.
* Added suggestions.
* Added package webhook.
* Add package api.
* Fixed swagger file.
* Fixed enum and comments.
* Fixed NuGet pagination.
* Print test names.
* Added api tests.
* Fixed access level.
* Fix User unmarshal.
* Added RubyGems package registry.
* Fix lint.
* Implemented io.Writer.
* Added support for sha256/sha512 checksum files.
* Improved maven-metadata.xml support.
* Added support for symbol package uploads.
* Added tests.
* Added overview docs.
* Added npm dependencies and keywords.
* Added no-packages information.
* Display file size.
* Display asset count.
* Fixed filter alignment.
* Added package icons.
* Formatted instructions.
* Allow anonymous package downloads.
* Fixed comments.
* Fixed postgres test.
* Moved file.
* Moved models to models/packages.
* Use correct error response format per client.
* Use simpler search form.
* Fixed IsProd.
* Restructured data model.
* Prevent empty filename.
* Fix swagger.
* Implemented user/org registry.
* Implemented UI.
* Use GetUserByIDCtx.
* Use table for dependencies.
* make svg
* Added support for unscoped npm packages.
* Add support for npm dist tags.
* Added tests for npm tags.
* Unlink packages if repository gets deleted.
* Prevent user/org delete if a packages exist.
* Use package unlink in repository service.
* Added support for composer packages.
* Restructured package docs.
* Added missing tests.
* Fixed generic content page.
* Fixed docs.
* Fixed swagger.
* Added missing type.
* Fixed ambiguous column.
* Organize content store by sha256 hash.
* Added admin package management.
* Added support for sorting.
* Add support for multiple identical versions/files.
* Added missing repository unlink.
* Added file properties.
* make fmt
* lint
* Added Conan package registry.
* Updated docs.
* Unify package names.
* Added swagger enum.
* Use longer TEXT column type.
* Removed version composite key.
* Merged package and container registry.
* Removed index.
* Use dedicated package router.
* Moved files to new location.
* Updated docs.
* Fixed JOIN order.
* Fixed GROUP BY statement.
* Fixed GROUP BY #2 .
* Added symbol server support.
* Added more tests.
* Set NOT NULL.
* Added setting to disable package registries.
* Moved auth into service.
* refactor
* Use ctx everywhere.
* Added package cleanup task.
* Changed packages path.
* Added container registry.
* Refactoring
* Updated comparison.
* Fix swagger.
* Fixed table order.
* Use token auth for npm routes.
* Enabled ReverseProxy auth.
* Added packages link for orgs.
* Fixed anonymous org access.
* Enable copy button for setup instructions.
* Merge error
* Added suggestions.
* Fixed merge.
* Handle "generic".
* Added link for TODO.
* Added suggestions.
* Changed temporary buffer filename.
* Added suggestions.
* Apply suggestions from code review
Co-authored-by: Thomas Boerger <[email protected] [email protected] [email protected]
2022-03-30 16:42:47 +08:00
KN4CK3R
d5c948f160
Don't clean up hardcoded tmp ( #18983 )
...
* Don't clean up hardcoded `tmp`.
* Fixed import.
2022-03-02 23:50:29 +01:00
43a479b6da
Add tag protection ( #15629 )
...
* Added tag protection in hook.
* Prevent UI tag creation if protected.
* Added settings page.
* Added tests.
* Added suggestions.
* Moved tests.
* Use individual errors.
* Removed unneeded methods.
* Switched delete selector.
* Changed method names.
* No reason to be unique.
* Allow editing of protected tags.
* Removed unique key from migration.
* Added docs page.
* Changed date.
* Respond with 404 to not found tags.
* Replaced glob with regex pattern.
* Added support for glob and regex pattern.
* Updated documentation.
* Changed white* to allow*.
* Fixed edit button link.
* Added cancel button.
Co-authored-by: zeripath <[email protected] [email protected]
2021-06-25 16:28:55 +02:00
KN4CK3R and techknowlogick
72450ec1a3
Add sanitizer rules per renderer ( #16110 )
...
* Added sanitizer rules per renderer.
* Updated documentation.
Co-authored-by: techknowlogick <[email protected]
2021-06-23 17:09:51 -04:00
KN4CK3R
f6697d4050
Use data path instead of config path ( #16227 )
2021-06-23 16:56:25 +02:00
KN4CK3R
2512376b13
Add asymmetric JWT signing ( #16010 )
...
* Added asymmetric token signing.
* Load signing key from settings.
* Added optional kid parameter.
* Updated documentation.
* Add "kid" to token header.
2021-06-17 23:56:46 +02:00
KN4CK3R
14ea80bc59
Add push to remote mirror repository ( #15157 )
...
* Added push mirror model.
* Integrated push mirror into queue.
* Moved methods into own file.
* Added basic implementation.
* Mirror wiki too.
* Removed duplicated method.
* Get url for different remotes.
* Added migration.
* Unified remote url access.
* Add/Remove push mirror remotes.
* Prevent hangs with missing credentials.
* Moved code between files.
* Changed sanitizer interface.
* Added push mirror backend methods.
* Only update the mirror remote.
* Limit refs on push.
* Added UI part.
* Added missing table.
* Delete mirror if repository gets removed.
* Changed signature. Handle object errors.
* Added upload method.
* Added "upload" unit tests.
* Added transfer adapter unit tests.
* Send correct headers.
* Added pushing of LFS objects.
* Added more logging.
* Simpler body handling.
* Process files in batches to reduce HTTP calls.
* Added created timestamp.
* Fixed invalid column name.
* Changed name to prevent xorm auto setting.
* Remove table header im empty.
* Strip exit code from error message.
* Added docs page about mirroring.
* Fixed date.
* Fixed merge errors.
* Moved test to integrations.
* Added push mirror test.
* Added test.
2021-06-14 19:20:43 +02:00
