Joe Chen
97ccb365ec
webhook: validate against hostname instead of full URL ( #7075 )
2022-06-25 20:36:05 +08:00
Joe Chen
083c3ee659
db: refactor "action" table to use GORM ( #7054 )
...
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-06-25 18:07:39 +08:00
Joe Chen
4a3dc6c774
db: skip auto migrate for existing "version" table ( #7057 )
2022-06-14 15:47:11 +08:00
Joe Chen
b772603d78
migrations: add tests and remove XORM ( #7050 )
2022-06-12 14:15:01 +08:00
Joe Chen
2e19f5a3c8
db: add tests for authentication through login sources ( #7049 )
2022-06-12 10:34:12 +08:00
Joe Chen
1df62fafb9
db: use `context` and go-mockgen for `ReposStore` ( #7046 )
2022-06-11 12:43:56 +08:00
Joe Chen
5e32058c13
db: use `context` and go-mockgen for `TwoFactorsStore` ( #7045 )
2022-06-11 11:54:11 +08:00
Joe Chen
75fbb82440
db: use `context` for backup and restore ( #7044 )
2022-06-11 11:10:25 +08:00
Joe Chen
f837ea6346
db: use `context` and go-mockgen for `UsersStore` ( #7042 )
2022-06-11 09:42:17 +08:00
Joe Chen
9776bdc9b8
db: use `context` and go-mockgen for login sources ( #7041 )
2022-06-10 19:54:36 +08:00
Joe Chen
94059f291d
db: use `context` and go-mockgen for `LFSStore` ( #7038 )
2022-06-10 11:27:06 +08:00
shlande
318fb25761
web: enable `ETag` to improve loading speed of static resources ( #7035 )
...
Co-authored-by: shlande <shlandeme@icloud.com>
2022-06-09 09:48:03 +08:00
Joe Chen
7229dd893f
db: use `context` and go-mockgen for `PermsStore` ( #7033 )
2022-06-08 19:26:20 +08:00
Joe Chen
0918d8758b
db: add back xorm tag for `AccessToken.UserID` ( #7032 )
2022-06-08 14:47:15 +08:00
Joe Chen
fe1d07f29c
db: rename `AccessTokensStore.Save` to `Touch` ( #7029 )
2022-06-08 13:34:10 +08:00
Joe Chen
9bf748b6c4
http: clean request path from Git endpoints ( #7022 )
2022-06-07 21:11:36 +08:00
Joe Chen
2ca014250f
pathutil: check both styles of `os.PathSeparator` ( #7020 )
2022-06-07 20:34:46 +08:00
Joe Chen
0a92ad27ef
db: use `context` and go-mockgen for `AccessTokensStore` ( #7013 )
2022-06-06 12:10:36 +08:00
Joe Chen
4cc3000b07
schemadoc: print table indexes ( #7012 )
2022-06-05 18:08:59 +08:00
E99p1ant
a328e7ccc4
access_token: encrypt access token with SHA256 ( #7008 )
...
* access_token: encrypt access token with SHA256
* revert list access token
* fix lint
* generate schemadoc
* add database migrations
* fix tests
* fix tests
* add test case for access token golden
* fix test in postgres
* `Sha256` -> `SHA256`
* Use GORM for migration
* task generate-schemadoc
* Use unique
* change migration name
* allow read
* task generate-schemadoc
* add changelog
* fix lint error
* update changelog
* remove Debug
* add comments
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-06-05 13:34:21 +08:00
Joe Chen
4455cc1244
db: code tidy up for `AccessTokens` ( #7006 )
2022-06-04 13:35:42 +08:00
Joe Chen
38aff73251
repo_editor: check both styles of `os.PathSeparator` in all systems ( #7005 )
2022-06-04 13:11:29 +08:00
Joe Chen
69827490e0
pull: ignore PR status check if head repository is missing ( #7004 )
2022-06-04 13:10:15 +08:00
Joe Chen
75e10445ca
http: fix non-sense `NotFound` call ( #7003 )
2022-06-04 10:44:54 +08:00
Joe Chen
09ddb8761f
repo: remove hard-coded branch name in init ( #6999 )
2022-06-03 17:14:21 +08:00
Joe Chen
ccdcb1c45b
db: run tests with pure-Go SQLite ( #6998 )
2022-06-03 10:03:48 +08:00
Joe Chen
5f34265db6
ci: run database tests against Postgres, MySQL and SQLite ( #6996 )
2022-06-01 22:51:46 +08:00
Joe Chen
7885f454a4
webhook: revalidate local hostname before each delivery ( #6988 )
2022-05-31 15:17:17 +08:00
Joe Chen
90bc752297
repo_editor: prohibit move files to to `.git` directory ( #6986 )
2022-05-31 15:10:00 +08:00
1135
519aeefbd9
repo_editor: prohibits uploading files to `.git.` directory ( #6970 )
...
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-05-30 19:14:41 +08:00
dependabot[bot]
d466c96229
mod: bump gopkg.in/ini.v1 from 1.66.4 to 1.66.5 ( #6984 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-05-30 19:00:49 +08:00
Joe Chen
04d3946511
web: print accessible URL on startup ( #6979 )
2022-05-29 19:45:40 +08:00
Toby Simmons
d54e153fc8
csrf: sanitize token after reading from cookie ( #6969 )
...
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-05-26 23:56:14 +08:00
Joe Chen
c4b770f305
chore: fix lint errors ( #6951 )
2022-05-16 20:57:19 +08:00
Joe Chen
f45dbf3e76
chore: watch "custom" directory in dev and use lowercase for header value ( #6927 )
2022-05-03 17:54:14 +08:00
Joe Chen
cb35b73048
attachment: set CSP header in the serving endpoint ( #6926 )
2022-05-03 17:51:28 +08:00
4e4o
f2c3027f50
restore: fix incorrect existence checking of "repositories.zip" ( #6914 )
2022-04-27 10:32:13 +08:00
dependabot[bot]
2601b40ffa
mod: bump github.com/gogs/git-module from 1.5.0 to 1.6.0 ( #6894 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-04-05 16:45:01 +08:00
Renzo Toma
efa572162f
webhook: add missing `%s` URL value for webhook description ( #6478 )
...
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-04-04 17:40:34 +08:00
Joe Chen
f37cd9672c
restore: clean up leftover and invalid chars ( #6875 )
2022-03-26 15:10:39 +08:00
dependabot[bot]
3c49a6173d
mod: bump github.com/gogs/git-module from 1.2.0 to 1.4.0 ( #6866 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-03-22 00:55:36 +08:00
Michael Li
32c454ba5f
assets: convert usage of go-bindata to Go embed ( #6851 )
...
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-03-17 14:05:09 +08:00
Joe Chen
1791665f74
chore: run `task generate` ( #6844 )
2022-03-15 22:42:22 +08:00
Joe Chen
714383a063
conf: add allowlist for accessing local network ( #6842 )
2022-03-14 22:06:08 +08:00
Joe Chen
aeb5e34490
golangci-lint: add `unparam` linter ( #6839 )
2022-03-13 22:37:00 +08:00
Joe Chen
775901058d
repo_editor: check upload `TreePath` and file name ( #6838 )
2022-03-13 22:18:56 +08:00
deepsource-autofix[bot]
553d32ce7d
autofix: format code with gofmt and gofumpt ( #6821 )
...
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
[skip ci]
2022-03-08 20:35:31 +08:00
ysf
940a7da9d1
security: fix improper PAM authorization handling ( #6819 )
...
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-03-08 20:02:01 +08:00
Michael Rowley
242deca524
security: fix SSRF in repository migration ( #6812 )
...
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-03-08 11:34:53 +08:00
deepsource-autofix[bot]
e452d94fc8
autofix: format code with gofumpt and gofmt ( #6803 )
...
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 17:55:17 +08:00
deepsource-autofix[bot]
2466da4e82
autofix: fix nested `if` with `else if` ( #6807 )
...
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 16:39:14 +08:00
deepsource-autofix[bot]
09dbbf9a69
autofix: fix unused method receiver ( #6808 )
...
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 16:37:41 +08:00
deepsource-autofix[bot]
b7372b1f32
autofix: fix unnecessary allocations due to `strings.Index` call ( #6806 )
...
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 16:34:01 +08:00
deepsource-autofix[bot]
5afca6ca8e
autofix: function call can be replaced with helper function ( #6805 )
...
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 16:33:55 +08:00
deepsource-autofix[bot]
deec3516d5
autofix: fix check for empty string ( #6804 )
...
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 16:33:45 +08:00
deepsource-autofix[bot]
442609fa17
autofix: simplify slice expression to sliced value itself ( #6801 )
...
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 16:03:27 +08:00
deepsource-autofix[bot]
2d609b8b31
autofix: types of function parameters can be combined ( #6800 )
...
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 15:59:45 +08:00
deepsource-autofix[bot]
3acc13038d
autofix: unused parameter should be replaced by underscore ( #6799 )
...
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 15:46:21 +08:00
shuyue
7c893a58da
markdown: support rendering Mermaid diagrams ( #6776 )
...
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-03-05 19:23:08 +08:00
Simone Cattaneo
6d77712b1b
dep: update github.com/go-ldap/ldap to v3 ( #6763 )
...
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-02-26 18:43:51 +08:00
Joe Chen
9ae80a6173
chore: rename few consts to camel case ( #6725 )
2022-01-13 11:27:16 +08:00
Joe Chen
5e43fa92ff
markup: use default link formation when no format in metas ( #6723 )
2022-01-13 10:13:36 +08:00
Joe Chen
2e625a051d
locale: sync from Crowdin ( #6714 )
2022-01-08 16:43:46 +08:00
zvrh
a9be4de5a5
database: add PostgreSQL custom schema support ( #6695 )
...
Co-authored-by: Homura37 <git@gvip.xyz>
Co-authored-by: Homura <16538800+Homura37@users.noreply.github.com>
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-01-05 22:02:33 +08:00
Joe Chen
7878465567
db: skip ping when not available ( #6687 )
2021-12-20 18:46:54 +08:00
Ikko Ashimine
6f2b7fb853
chore: fix typo in message.go ( #6587 )
2021-12-16 21:06:41 +08:00
Devops
d60d9cf985
api: support listing repository tags ( #6656 )
...
Co-authored-by: zhouzhibo <zhouzhibo>
Co-authored-by: Joe Chen <jc@unknwon.io>
2021-12-14 20:41:12 +08:00
Joe Chen
63bd4bb4b1
locale: sync from Crowdin ( #6651 )
2021-11-28 17:03:18 +08:00
Pavel M
de3161155b
api: EditWiki implementation ( #5860 )
...
Co-authored-by: Joe Chen <jc@unknwon.io>
2021-11-10 13:29:27 +08:00
Joe Chen
8938855b40
locale: sync from Crowdin ( #6633 )
2021-10-23 21:58:26 +08:00
Joe Chen
fa3d011415
chore: fix lint errors ( #6620 )
2021-09-24 00:44:09 +08:00
Jordan Levin
b9a3626cad
api: add `GET /api/v1/{owner}/{repo}/commits` endpoint ( #6574 )
...
This pull request targets issue #6573 .
It provides a new API endpoint: `/api/v1/repos/{org}/{repo}/commits?pageSize=<int>` with a default page size of 30 commits (the same as the UI).
This implementation currently only focuses on the main/master branch of the repository, and does not provide the ability to return commit history for other branches.
- Note: Since the logic for converting a git.Commit to api.Commit had to be used in `GetAllCommits` and `GetSingleCommit`, I decided to pull the code out into a helper function, ` gitCommitToAPICommit(commit, context)`.
2021-09-24 00:33:52 +08:00
James-REANNZ
8f6757cc7b
web: correctly handle go-get pages for repository roots ( #6598 )
...
Fixes regression in go-get handling introduced in #6318 .
2021-08-26 13:12:51 +08:00
ᴜɴᴋɴᴡᴏɴ
7445dec1b4
locale: sync from Crowdin ( #6602 )
2021-08-08 22:07:58 +08:00
ᴜɴᴋɴᴡᴏɴ
1a1a01a842
ci: use new lint action and add custom config ( #6562 )
2021-05-19 13:38:13 +08:00
Atin
d6987ee05b
chore: fix typos in code comments ( #6556 )
2021-05-19 13:12:09 +08:00
ᴜɴᴋɴᴡᴏɴ
509a392272
locale: sync from Crowdin ( #6510 )
...
* locale: sync from Crowdin
* Fix tests
2021-02-27 18:48:10 +08:00
ᴜɴᴋɴᴡᴏɴ
af6510fd17
locale: sync from Crowdin ( #6449 )
2020-12-13 10:24:23 +08:00
ᴜɴᴋɴᴡᴏɴ
72af17bbbe
db: simplify GORM logger init in tests ( #6444 )
2020-12-06 01:06:24 +08:00
Eduardo Bacchi Kienetz
c875950c43
ssh: allow setting allowed MAC algorithms for built-in server ( #6435 )
...
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-12-04 21:52:26 +08:00
dependabot-preview[bot]
99f1b9899f
build(deps): bump gorm.io/gorm from 1.20.6 to 1.20.7 ( #6425 )
...
* build(deps): bump gorm.io/gorm from 1.20.6 to 1.20.7
Bumps [gorm.io/gorm](https://github.com/go-gorm/gorm ) from 1.20.6 to 1.20.7.
- [Release notes](https://github.com/go-gorm/gorm/releases )
- [Commits](https://github.com/go-gorm/gorm/compare/v1.20.6...v1.20.7 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
* Fix compile error
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-11-28 02:11:11 +08:00
stypr
cd469f7a1d
repo: disallow urlencoded new lines in git protocol paths ( #6420 )
...
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-11-27 18:52:42 +08:00
weibaohui
c7f58ca870
templates: fix typo of BranchCount ( #6370 )
...
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-11-24 23:13:40 +08:00
ᴜɴᴋɴᴡᴏɴ
afaf6da405
locale: sync from Crowdin ( #6419 )
2020-11-15 01:14:39 +08:00
Matheus Mosca
997ba0fef0
context: add X-Frame-Options header ( #6411 )
...
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-11-11 12:17:43 +08:00
ᴜɴᴋɴᴡᴏɴ
428276d7a8
locale: sync from Crowdin ( #6404 )
2020-10-31 18:34:44 +08:00
ᴜɴᴋɴᴡᴏɴ
1744f238e1
locale: sync from Crowdin ( #6383 )
2020-10-11 14:18:21 +08:00
E99p1ant
fd765bd88f
context: fix Access-Control-Allow-Credentials header typo ( #6381 )
2020-10-10 23:09:42 +08:00
ᴜɴᴋɴᴡᴏɴ
2eaf1d693a
db: migrate access table to use GORM ( #6371 )
2020-10-06 15:43:28 +08:00
ᴜɴᴋɴᴡᴏɴ
ca3330cecd
lfs: ask client to always send the same value for the HTTP header ( #6369 )
2020-10-04 18:40:39 +08:00
ᴜɴᴋɴᴡᴏɴ
a6bd00f807
locale: sync from Crowdin ( #6367 )
2020-10-04 08:37:55 +08:00
Zhukov Roman
be86d67e81
Add git diff timeout in app config ( #6348 )
...
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-09-29 23:12:17 +08:00
Jeff
23823e9698
markup: render SHA links without branch prefix ( #6350 )
...
Co-authored-by: Zhukov Roman <zhukov.roman@gmail.com>
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-09-29 23:07:16 +08:00
ᴜɴᴋɴᴡᴏɴ
7bc3ee49aa
cmd/serv: use different log files for ORMs in hook mode ( #6361 )
2020-09-29 22:26:07 +08:00
ᴜɴᴋɴᴡᴏɴ
83a89127fd
action: fix issue reference regexp and error handling ( #6352 )
2020-09-26 16:23:05 +08:00
ᴜɴᴋɴᴡᴏɴ
3af91d7cfd
auth: decouple types and functions from db ( #6320 )
2020-09-20 11:19:02 +08:00
ᴜɴᴋɴᴡᴏɴ
c56db8f2c4
db: create new session for MySQL after changing attribute ( #6338 )
2020-09-18 18:37:47 +08:00
ᴜɴᴋɴᴡᴏɴ
dda1092e74
gitutil: infer submodule with baseURL when it is a relative path ( #6337 )
2020-09-18 16:19:31 +08:00
ᴜɴᴋɴᴡᴏɴ
56eac57222
locale: sync from Crowdin ( #6333 )
2020-09-16 23:15:57 +08:00
ᴜɴᴋɴᴡᴏɴ
594a2dc41f
web: correctly serving go-get pages for subdirs ( #6318 )
...
* web: correctly serving go-get page for subdirs
* Update CHANGELOG
* Fix golint error
2020-09-09 20:14:48 +08:00