Commit Graph

238 Commits (4cc3000b07edf80939cde550c6b259ecd980eadb)

Author SHA1 Message Date
Joe Chen 4cc3000b07
schemadoc: print table indexes (#7012) 2022-06-05 18:08:59 +08:00
E99p1ant a328e7ccc4
access_token: encrypt access token with SHA256 (#7008)
* access_token: encrypt access token with SHA256

* revert list access token

* fix lint

* generate schemadoc

* add database migrations

* fix tests

* fix tests

* add test case for access token golden

* fix test in postgres

* `Sha256` -> `SHA256`

* Use GORM for migration

* task generate-schemadoc

* Use unique

* change migration name

* allow read

* task generate-schemadoc

* add changelog

* fix lint error

* update changelog

* remove Debug

* add comments

Co-authored-by: Joe Chen <jc@unknwon.io>
2022-06-05 13:34:21 +08:00
Joe Chen 4455cc1244
db: code tidy up for `AccessTokens` (#7006) 2022-06-04 13:35:42 +08:00
Joe Chen 38aff73251
repo_editor: check both styles of `os.PathSeparator` in all systems (#7005) 2022-06-04 13:11:29 +08:00
Joe Chen 69827490e0
pull: ignore PR status check if head repository is missing (#7004) 2022-06-04 13:10:15 +08:00
Joe Chen 75e10445ca
http: fix non-sense `NotFound` call (#7003) 2022-06-04 10:44:54 +08:00
Joe Chen 09ddb8761f
repo: remove hard-coded branch name in init (#6999) 2022-06-03 17:14:21 +08:00
Joe Chen ccdcb1c45b
db: run tests with pure-Go SQLite (#6998) 2022-06-03 10:03:48 +08:00
Joe Chen 5f34265db6
ci: run database tests against Postgres, MySQL and SQLite (#6996) 2022-06-01 22:51:46 +08:00
Joe Chen 7885f454a4
webhook: revalidate local hostname before each delivery (#6988) 2022-05-31 15:17:17 +08:00
Joe Chen 90bc752297
repo_editor: prohibit move files to to `.git` directory (#6986) 2022-05-31 15:10:00 +08:00
1135 519aeefbd9
repo_editor: prohibits uploading files to `.git.` directory (#6970)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-05-30 19:14:41 +08:00
dependabot[bot] d466c96229
mod: bump gopkg.in/ini.v1 from 1.66.4 to 1.66.5 (#6984)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-05-30 19:00:49 +08:00
Joe Chen 04d3946511
web: print accessible URL on startup (#6979) 2022-05-29 19:45:40 +08:00
Toby Simmons d54e153fc8
csrf: sanitize token after reading from cookie (#6969)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-05-26 23:56:14 +08:00
Joe Chen c4b770f305
chore: fix lint errors (#6951) 2022-05-16 20:57:19 +08:00
Joe Chen f45dbf3e76
chore: watch "custom" directory in dev and use lowercase for header value (#6927) 2022-05-03 17:54:14 +08:00
Joe Chen cb35b73048
attachment: set CSP header in the serving endpoint (#6926) 2022-05-03 17:51:28 +08:00
4e4o f2c3027f50
restore: fix incorrect existence checking of "repositories.zip" (#6914) 2022-04-27 10:32:13 +08:00
dependabot[bot] 2601b40ffa
mod: bump github.com/gogs/git-module from 1.5.0 to 1.6.0 (#6894)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-04-05 16:45:01 +08:00
Renzo Toma efa572162f
webhook: add missing `%s` URL value for webhook description (#6478)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-04-04 17:40:34 +08:00
Joe Chen f37cd9672c
restore: clean up leftover and invalid chars (#6875) 2022-03-26 15:10:39 +08:00
dependabot[bot] 3c49a6173d
mod: bump github.com/gogs/git-module from 1.2.0 to 1.4.0 (#6866)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-03-22 00:55:36 +08:00
Michael Li 32c454ba5f
assets: convert usage of go-bindata to Go embed (#6851)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-03-17 14:05:09 +08:00
Joe Chen 1791665f74
chore: run `task generate` (#6844) 2022-03-15 22:42:22 +08:00
Joe Chen 714383a063
conf: add allowlist for accessing local network (#6842) 2022-03-14 22:06:08 +08:00
Joe Chen aeb5e34490
golangci-lint: add `unparam` linter (#6839) 2022-03-13 22:37:00 +08:00
Joe Chen 775901058d
repo_editor: check upload `TreePath` and file name (#6838) 2022-03-13 22:18:56 +08:00
deepsource-autofix[bot] 553d32ce7d
autofix: format code with gofmt and gofumpt (#6821)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>

[skip ci]
2022-03-08 20:35:31 +08:00
ysf 940a7da9d1
security: fix improper PAM authorization handling (#6819)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-03-08 20:02:01 +08:00
Michael Rowley 242deca524
security: fix SSRF in repository migration (#6812)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-03-08 11:34:53 +08:00
deepsource-autofix[bot] e452d94fc8
autofix: format code with gofumpt and gofmt (#6803)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 17:55:17 +08:00
deepsource-autofix[bot] 2466da4e82
autofix: fix nested `if` with `else if` (#6807)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 16:39:14 +08:00
deepsource-autofix[bot] 09dbbf9a69
autofix: fix unused method receiver (#6808)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 16:37:41 +08:00
deepsource-autofix[bot] b7372b1f32
autofix: fix unnecessary allocations due to `strings.Index` call (#6806)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 16:34:01 +08:00
deepsource-autofix[bot] 5afca6ca8e
autofix: function call can be replaced with helper function (#6805)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 16:33:55 +08:00
deepsource-autofix[bot] deec3516d5
autofix: fix check for empty string (#6804)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 16:33:45 +08:00
deepsource-autofix[bot] 442609fa17
autofix: simplify slice expression to sliced value itself (#6801)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 16:03:27 +08:00
deepsource-autofix[bot] 2d609b8b31
autofix: types of function parameters can be combined (#6800)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 15:59:45 +08:00
deepsource-autofix[bot] 3acc13038d
autofix: unused parameter should be replaced by underscore (#6799)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 15:46:21 +08:00
shuyue 7c893a58da
markdown: support rendering Mermaid diagrams (#6776)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-03-05 19:23:08 +08:00
Simone Cattaneo 6d77712b1b
dep: update github.com/go-ldap/ldap to v3 (#6763)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-02-26 18:43:51 +08:00
Joe Chen 9ae80a6173
chore: rename few consts to camel case (#6725) 2022-01-13 11:27:16 +08:00
Joe Chen 5e43fa92ff
markup: use default link formation when no format in metas (#6723) 2022-01-13 10:13:36 +08:00
Joe Chen 2e625a051d
locale: sync from Crowdin (#6714) 2022-01-08 16:43:46 +08:00
zvrh a9be4de5a5
database: add PostgreSQL custom schema support (#6695)
Co-authored-by: Homura37 <git@gvip.xyz>
Co-authored-by: Homura <16538800+Homura37@users.noreply.github.com>
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-01-05 22:02:33 +08:00
Joe Chen 7878465567
db: skip ping when not available (#6687) 2021-12-20 18:46:54 +08:00
Ikko Ashimine 6f2b7fb853
chore: fix typo in message.go (#6587) 2021-12-16 21:06:41 +08:00
Devops d60d9cf985
api: support listing repository tags (#6656)
Co-authored-by: zhouzhibo <zhouzhibo>
Co-authored-by: Joe Chen <jc@unknwon.io>
2021-12-14 20:41:12 +08:00
Joe Chen 63bd4bb4b1
locale: sync from Crowdin (#6651) 2021-11-28 17:03:18 +08:00