Commit Graph

83 Commits (main)

Author SHA1 Message Date
Joe Chen 68b3c8f339
repo: ignore unintended Git options for diff preview (#7871)
## Describe the pull request

Fixes
https://github.com/gogs/gogs/security/advisories/GHSA-9pp6-wq8c-3w2c
2024-12-22 15:59:03 -05:00
Joe Chen 9a9388ace2
api: clean file path for updating repo contents (#7859)
## Describe the pull request

Link to the issue: closes https://github.com/gogs/gogs/issues/7582
2024-12-14 21:30:34 -05:00
Joe Chen c94baec9ca
repo/editor: disallow editing symlink while changing file name (#7857)
## Describe the pull request

Link to the issue: https://github.com/gogs/gogs/issues/7582
2024-12-08 21:12:55 -05:00
Joe Chen d9ecdcaef0
all: unwrap `database.UsersStore` interface (#7708) 2024-03-27 23:18:59 -04:00
Joe Chen 202012887a
all: unwrap `database.TwoFactorsStore` interface (#7707) 2024-03-27 22:14:08 -04:00
Joe Chen 4d05804729
all: unwrap `database.RepositoriesStore` interface (#7706) 2024-03-26 23:34:31 -04:00
Joe Chen 5cf0189df1
all: unwrap `database.PermissionsStore` interface (#7701) 2024-03-23 20:46:32 -04:00
Joe Chen dd49412edd
all: unwrap `database.OrganizationsStore` interface (#7696) 2024-03-19 19:33:43 -04:00
Joe Chen 6d77d6204d
all: unwrap `database.ActionsStore` interface (#7686) 2024-03-13 22:03:02 -04:00
Joe Chen 8054ffc12f
all: unwrap `database.AccessTokensStore` interface (#7670) 2024-02-20 21:47:32 -05:00
Joe Chen 3650b32ec5
chore: rename `internal/db` to `internal/database` (#7665) 2024-02-18 19:39:41 -05:00
Athanasios Oikonomou c531da02ca
commit: fix `matchUsersWithCommitEmails` (#7561)
Co-authored-by: Joe Chen <jc@unknwon.io>
2023-11-01 11:58:48 -04:00
Joe Chen 8350daf505
refactor(db): merge relation stores into entity stores (#7341) 2023-02-08 13:55:54 +08:00
Joe Chen 6d220540c1
refactor(db): migrate methods off `user.go` (#7334) 2023-02-04 13:36:00 +08:00
Joe Chen ed51686240
refactor(db): migrate methods off `user.go` (#7333) 2023-02-04 12:22:37 +08:00
Joe Chen c53a1998c5
all: replace `interface{}` with `any` (#7330)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2023-02-02 21:25:25 +08:00
Joe Chen ae20d03aec
refactor(db): migrate `UpdateUser` off `user.go` (#7267) 2022-11-27 19:36:10 +08:00
Joe Chen 44333afd20
chore: consistently use `errors.Cause` for identifying error types (#7264) 2022-11-27 15:53:26 +08:00
Joe Chen 13099a7e4f
refactor(db): add `Users.Update` (#7263) 2022-11-27 15:19:44 +08:00
Joe Chen 5fb29db2db
refactor(db): migrate methods off and delete deprecated methods from `user.go` (#7231) 2022-11-05 23:33:05 +08:00
Joe Chen fd798b4197
refactor(db): migrate methods off `user.go` (#7228) 2022-11-05 17:55:05 +08:00
Joe Chen a66c90462d
refactor(db): migrate methods off `user.go` and `org.go` (#7219) (#7227) 2022-11-05 13:12:53 +08:00
Joe Chen 3265abfbc2
refactor(db): migrate perms methods off `user.go` (#7207) 2022-10-23 21:22:36 +08:00
Joe Chen c58c893621
refactor(db): migrate password methods off `user.go` (#7205) 2022-10-23 19:15:14 +08:00
Joe Chen 8077360cf6
chore(db): remove unused field (#7202) 2022-10-23 00:15:43 +08:00
Joe Chen 11edc09681
refactor: replace `ioutil.ReadAll` with `io.ReadAll` (#7200) 2022-10-22 21:34:53 +08:00
Yang Liu b9f5cfddc1
auth: enable authentication by token from password (#7198)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-10-22 21:25:36 +08:00
Joe Chen c502dc6ed8
refactor(db): move some methods from `user.go` to `users.go` (#7195) 2022-10-22 14:41:40 +08:00
Joe Chen 8982a42d38
refactor(db): move `User.HasForkedRepository` to `users.HasForkedRepository` (#7176)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-10-09 22:55:32 +08:00
Joe Chen 083c3ee659
db: refactor "action" table to use GORM (#7054)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-06-25 18:07:39 +08:00
Joe Chen 1df62fafb9
db: use `context` and go-mockgen for `ReposStore` (#7046) 2022-06-11 12:43:56 +08:00
Joe Chen f837ea6346
db: use `context` and go-mockgen for `UsersStore` (#7042) 2022-06-11 09:42:17 +08:00
Joe Chen 7229dd893f
db: use `context` and go-mockgen for `PermsStore` (#7033) 2022-06-08 19:26:20 +08:00
Joe Chen fe1d07f29c
db: rename `AccessTokensStore.Save` to `Touch` (#7029) 2022-06-08 13:34:10 +08:00
Joe Chen 9bf748b6c4
http: clean request path from Git endpoints (#7022) 2022-06-07 21:11:36 +08:00
Joe Chen 0a92ad27ef
db: use `context` and go-mockgen for `AccessTokensStore` (#7013) 2022-06-06 12:10:36 +08:00
E99p1ant a328e7ccc4
access_token: encrypt access token with SHA256 (#7008)
* access_token: encrypt access token with SHA256

* revert list access token

* fix lint

* generate schemadoc

* add database migrations

* fix tests

* fix tests

* add test case for access token golden

* fix test in postgres

* `Sha256` -> `SHA256`

* Use GORM for migration

* task generate-schemadoc

* Use unique

* change migration name

* allow read

* task generate-schemadoc

* add changelog

* fix lint error

* update changelog

* remove Debug

* add comments

Co-authored-by: Joe Chen <jc@unknwon.io>
2022-06-05 13:34:21 +08:00
Joe Chen 75e10445ca
http: fix non-sense `NotFound` call (#7003) 2022-06-04 10:44:54 +08:00
Joe Chen 7885f454a4
webhook: revalidate local hostname before each delivery (#6988) 2022-05-31 15:17:17 +08:00
Renzo Toma efa572162f
webhook: add missing `%s` URL value for webhook description (#6478)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-04-04 17:40:34 +08:00
Joe Chen 714383a063
conf: add allowlist for accessing local network (#6842) 2022-03-14 22:06:08 +08:00
Michael Rowley 242deca524
security: fix SSRF in repository migration (#6812)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-03-08 11:34:53 +08:00
deepsource-autofix[bot] e452d94fc8
autofix: format code with gofumpt and gofmt (#6803)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 17:55:17 +08:00
deepsource-autofix[bot] 5afca6ca8e
autofix: function call can be replaced with helper function (#6805)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 16:33:55 +08:00
deepsource-autofix[bot] deec3516d5
autofix: fix check for empty string (#6804)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 16:33:45 +08:00
deepsource-autofix[bot] 2d609b8b31
autofix: types of function parameters can be combined (#6800)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 15:59:45 +08:00
deepsource-autofix[bot] 3acc13038d
autofix: unused parameter should be replaced by underscore (#6799)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 15:46:21 +08:00
Joe Chen 9ae80a6173
chore: rename few consts to camel case (#6725) 2022-01-13 11:27:16 +08:00
ᴜɴᴋɴᴡᴏɴ 1a1a01a842
ci: use new lint action and add custom config (#6562) 2021-05-19 13:38:13 +08:00
Atin d6987ee05b
chore: fix typos in code comments (#6556) 2021-05-19 13:12:09 +08:00