Commit Graph

306 Commits (5483d97f73bf22ee4f8efddff246ed0433d75c6a)

Author SHA1 Message Date
Joe Chen 97ccb365ec
webhook: validate against hostname instead of full URL (#7075) 2022-06-25 20:36:05 +08:00
Joe Chen 083c3ee659
db: refactor "action" table to use GORM (#7054)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-06-25 18:07:39 +08:00
Joe Chen 4a3dc6c774
db: skip auto migrate for existing "version" table (#7057) 2022-06-14 15:47:11 +08:00
Joe Chen b772603d78
migrations: add tests and remove XORM (#7050) 2022-06-12 14:15:01 +08:00
Joe Chen 2e19f5a3c8
db: add tests for authentication through login sources (#7049) 2022-06-12 10:34:12 +08:00
Joe Chen 1df62fafb9
db: use `context` and go-mockgen for `ReposStore` (#7046) 2022-06-11 12:43:56 +08:00
Joe Chen 5e32058c13
db: use `context` and go-mockgen for `TwoFactorsStore` (#7045) 2022-06-11 11:54:11 +08:00
Joe Chen 75fbb82440
db: use `context` for backup and restore (#7044) 2022-06-11 11:10:25 +08:00
Joe Chen f837ea6346
db: use `context` and go-mockgen for `UsersStore` (#7042) 2022-06-11 09:42:17 +08:00
Joe Chen 9776bdc9b8
db: use `context` and go-mockgen for login sources (#7041) 2022-06-10 19:54:36 +08:00
Joe Chen 94059f291d
db: use `context` and go-mockgen for `LFSStore` (#7038) 2022-06-10 11:27:06 +08:00
shlande 318fb25761
web: enable `ETag` to improve loading speed of static resources (#7035)
Co-authored-by: shlande <shlandeme@icloud.com>
2022-06-09 09:48:03 +08:00
Joe Chen 7229dd893f
db: use `context` and go-mockgen for `PermsStore` (#7033) 2022-06-08 19:26:20 +08:00
Joe Chen 0918d8758b
db: add back xorm tag for `AccessToken.UserID` (#7032) 2022-06-08 14:47:15 +08:00
Joe Chen fe1d07f29c
db: rename `AccessTokensStore.Save` to `Touch` (#7029) 2022-06-08 13:34:10 +08:00
Joe Chen 9bf748b6c4
http: clean request path from Git endpoints (#7022) 2022-06-07 21:11:36 +08:00
Joe Chen 2ca014250f
pathutil: check both styles of `os.PathSeparator` (#7020) 2022-06-07 20:34:46 +08:00
Joe Chen 0a92ad27ef
db: use `context` and go-mockgen for `AccessTokensStore` (#7013) 2022-06-06 12:10:36 +08:00
Joe Chen 4cc3000b07
schemadoc: print table indexes (#7012) 2022-06-05 18:08:59 +08:00
E99p1ant a328e7ccc4
access_token: encrypt access token with SHA256 (#7008)
* access_token: encrypt access token with SHA256

* revert list access token

* fix lint

* generate schemadoc

* add database migrations

* fix tests

* fix tests

* add test case for access token golden

* fix test in postgres

* `Sha256` -> `SHA256`

* Use GORM for migration

* task generate-schemadoc

* Use unique

* change migration name

* allow read

* task generate-schemadoc

* add changelog

* fix lint error

* update changelog

* remove Debug

* add comments

Co-authored-by: Joe Chen <jc@unknwon.io>
2022-06-05 13:34:21 +08:00
Joe Chen 4455cc1244
db: code tidy up for `AccessTokens` (#7006) 2022-06-04 13:35:42 +08:00
Joe Chen 38aff73251
repo_editor: check both styles of `os.PathSeparator` in all systems (#7005) 2022-06-04 13:11:29 +08:00
Joe Chen 69827490e0
pull: ignore PR status check if head repository is missing (#7004) 2022-06-04 13:10:15 +08:00
Joe Chen 75e10445ca
http: fix non-sense `NotFound` call (#7003) 2022-06-04 10:44:54 +08:00
Joe Chen 09ddb8761f
repo: remove hard-coded branch name in init (#6999) 2022-06-03 17:14:21 +08:00
Joe Chen ccdcb1c45b
db: run tests with pure-Go SQLite (#6998) 2022-06-03 10:03:48 +08:00
Joe Chen 5f34265db6
ci: run database tests against Postgres, MySQL and SQLite (#6996) 2022-06-01 22:51:46 +08:00
Joe Chen 7885f454a4
webhook: revalidate local hostname before each delivery (#6988) 2022-05-31 15:17:17 +08:00
Joe Chen 90bc752297
repo_editor: prohibit move files to to `.git` directory (#6986) 2022-05-31 15:10:00 +08:00
1135 519aeefbd9
repo_editor: prohibits uploading files to `.git.` directory (#6970)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-05-30 19:14:41 +08:00
dependabot[bot] d466c96229
mod: bump gopkg.in/ini.v1 from 1.66.4 to 1.66.5 (#6984)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-05-30 19:00:49 +08:00
Joe Chen 04d3946511
web: print accessible URL on startup (#6979) 2022-05-29 19:45:40 +08:00
Toby Simmons d54e153fc8
csrf: sanitize token after reading from cookie (#6969)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-05-26 23:56:14 +08:00
Joe Chen c4b770f305
chore: fix lint errors (#6951) 2022-05-16 20:57:19 +08:00
Joe Chen f45dbf3e76
chore: watch "custom" directory in dev and use lowercase for header value (#6927) 2022-05-03 17:54:14 +08:00
Joe Chen cb35b73048
attachment: set CSP header in the serving endpoint (#6926) 2022-05-03 17:51:28 +08:00
4e4o f2c3027f50
restore: fix incorrect existence checking of "repositories.zip" (#6914) 2022-04-27 10:32:13 +08:00
dependabot[bot] 2601b40ffa
mod: bump github.com/gogs/git-module from 1.5.0 to 1.6.0 (#6894)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-04-05 16:45:01 +08:00
Renzo Toma efa572162f
webhook: add missing `%s` URL value for webhook description (#6478)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-04-04 17:40:34 +08:00
Joe Chen f37cd9672c
restore: clean up leftover and invalid chars (#6875) 2022-03-26 15:10:39 +08:00
dependabot[bot] 3c49a6173d
mod: bump github.com/gogs/git-module from 1.2.0 to 1.4.0 (#6866)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-03-22 00:55:36 +08:00
Michael Li 32c454ba5f
assets: convert usage of go-bindata to Go embed (#6851)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-03-17 14:05:09 +08:00
Joe Chen 1791665f74
chore: run `task generate` (#6844) 2022-03-15 22:42:22 +08:00
Joe Chen 714383a063
conf: add allowlist for accessing local network (#6842) 2022-03-14 22:06:08 +08:00
Joe Chen aeb5e34490
golangci-lint: add `unparam` linter (#6839) 2022-03-13 22:37:00 +08:00
Joe Chen 775901058d
repo_editor: check upload `TreePath` and file name (#6838) 2022-03-13 22:18:56 +08:00
deepsource-autofix[bot] 553d32ce7d
autofix: format code with gofmt and gofumpt (#6821)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>

[skip ci]
2022-03-08 20:35:31 +08:00
ysf 940a7da9d1
security: fix improper PAM authorization handling (#6819)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-03-08 20:02:01 +08:00
Michael Rowley 242deca524
security: fix SSRF in repository migration (#6812)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-03-08 11:34:53 +08:00
deepsource-autofix[bot] e452d94fc8
autofix: format code with gofumpt and gofmt (#6803)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 17:55:17 +08:00
deepsource-autofix[bot] 2466da4e82
autofix: fix nested `if` with `else if` (#6807)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 16:39:14 +08:00
deepsource-autofix[bot] 09dbbf9a69
autofix: fix unused method receiver (#6808)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 16:37:41 +08:00
deepsource-autofix[bot] b7372b1f32
autofix: fix unnecessary allocations due to `strings.Index` call (#6806)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 16:34:01 +08:00
deepsource-autofix[bot] 5afca6ca8e
autofix: function call can be replaced with helper function (#6805)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 16:33:55 +08:00
deepsource-autofix[bot] deec3516d5
autofix: fix check for empty string (#6804)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 16:33:45 +08:00
deepsource-autofix[bot] 442609fa17
autofix: simplify slice expression to sliced value itself (#6801)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 16:03:27 +08:00
deepsource-autofix[bot] 2d609b8b31
autofix: types of function parameters can be combined (#6800)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 15:59:45 +08:00
deepsource-autofix[bot] 3acc13038d
autofix: unused parameter should be replaced by underscore (#6799)
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
2022-03-06 15:46:21 +08:00
shuyue 7c893a58da
markdown: support rendering Mermaid diagrams (#6776)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-03-05 19:23:08 +08:00
Simone Cattaneo 6d77712b1b
dep: update github.com/go-ldap/ldap to v3 (#6763)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-02-26 18:43:51 +08:00
Joe Chen 9ae80a6173
chore: rename few consts to camel case (#6725) 2022-01-13 11:27:16 +08:00
Joe Chen 5e43fa92ff
markup: use default link formation when no format in metas (#6723) 2022-01-13 10:13:36 +08:00
Joe Chen 2e625a051d
locale: sync from Crowdin (#6714) 2022-01-08 16:43:46 +08:00
zvrh a9be4de5a5
database: add PostgreSQL custom schema support (#6695)
Co-authored-by: Homura37 <git@gvip.xyz>
Co-authored-by: Homura <16538800+Homura37@users.noreply.github.com>
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-01-05 22:02:33 +08:00
Joe Chen 7878465567
db: skip ping when not available (#6687) 2021-12-20 18:46:54 +08:00
Ikko Ashimine 6f2b7fb853
chore: fix typo in message.go (#6587) 2021-12-16 21:06:41 +08:00
Devops d60d9cf985
api: support listing repository tags (#6656)
Co-authored-by: zhouzhibo <zhouzhibo>
Co-authored-by: Joe Chen <jc@unknwon.io>
2021-12-14 20:41:12 +08:00
Joe Chen 63bd4bb4b1
locale: sync from Crowdin (#6651) 2021-11-28 17:03:18 +08:00
Pavel M de3161155b
api: EditWiki implementation (#5860)
Co-authored-by: Joe Chen <jc@unknwon.io>
2021-11-10 13:29:27 +08:00
Joe Chen 8938855b40
locale: sync from Crowdin (#6633) 2021-10-23 21:58:26 +08:00
Joe Chen fa3d011415
chore: fix lint errors (#6620) 2021-09-24 00:44:09 +08:00
Jordan Levin b9a3626cad
api: add `GET /api/v1/{owner}/{repo}/commits` endpoint (#6574)
This pull request targets issue #6573.

It provides a new API endpoint: `/api/v1/repos/{org}/{repo}/commits?pageSize=<int>` with a default page size of 30 commits (the same as the UI).

This implementation currently only focuses on the main/master branch of the repository, and does not provide the ability to return commit history for other branches.

- Note: Since the logic for converting a git.Commit to api.Commit had to be used in `GetAllCommits` and `GetSingleCommit`, I decided to pull the code out into a helper function, ` gitCommitToAPICommit(commit, context)`.
2021-09-24 00:33:52 +08:00
James-REANNZ 8f6757cc7b
web: correctly handle go-get pages for repository roots (#6598)
Fixes regression in go-get handling introduced in #6318.
2021-08-26 13:12:51 +08:00
ᴜɴᴋɴᴡᴏɴ 7445dec1b4
locale: sync from Crowdin (#6602) 2021-08-08 22:07:58 +08:00
ᴜɴᴋɴᴡᴏɴ 1a1a01a842
ci: use new lint action and add custom config (#6562) 2021-05-19 13:38:13 +08:00
Atin d6987ee05b
chore: fix typos in code comments (#6556) 2021-05-19 13:12:09 +08:00
ᴜɴᴋɴᴡᴏɴ 509a392272
locale: sync from Crowdin (#6510)
* locale: sync from Crowdin

* Fix tests
2021-02-27 18:48:10 +08:00
ᴜɴᴋɴᴡᴏɴ af6510fd17
locale: sync from Crowdin (#6449) 2020-12-13 10:24:23 +08:00
ᴜɴᴋɴᴡᴏɴ 72af17bbbe
db: simplify GORM logger init in tests (#6444) 2020-12-06 01:06:24 +08:00
Eduardo Bacchi Kienetz c875950c43
ssh: allow setting allowed MAC algorithms for built-in server (#6435)
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-12-04 21:52:26 +08:00
dependabot-preview[bot] 99f1b9899f
build(deps): bump gorm.io/gorm from 1.20.6 to 1.20.7 (#6425)
* build(deps): bump gorm.io/gorm from 1.20.6 to 1.20.7

Bumps [gorm.io/gorm](https://github.com/go-gorm/gorm) from 1.20.6 to 1.20.7.
- [Release notes](https://github.com/go-gorm/gorm/releases)
- [Commits](https://github.com/go-gorm/gorm/compare/v1.20.6...v1.20.7)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

* Fix compile error

Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-11-28 02:11:11 +08:00
stypr cd469f7a1d
repo: disallow urlencoded new lines in git protocol paths (#6420)
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-11-27 18:52:42 +08:00
weibaohui c7f58ca870
templates: fix typo of BranchCount (#6370)
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-11-24 23:13:40 +08:00
ᴜɴᴋɴᴡᴏɴ afaf6da405
locale: sync from Crowdin (#6419) 2020-11-15 01:14:39 +08:00
Matheus Mosca 997ba0fef0
context: add X-Frame-Options header (#6411)
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-11-11 12:17:43 +08:00
ᴜɴᴋɴᴡᴏɴ 428276d7a8
locale: sync from Crowdin (#6404) 2020-10-31 18:34:44 +08:00
ᴜɴᴋɴᴡᴏɴ 1744f238e1
locale: sync from Crowdin (#6383) 2020-10-11 14:18:21 +08:00
E99p1ant fd765bd88f
context: fix Access-Control-Allow-Credentials header typo (#6381) 2020-10-10 23:09:42 +08:00
ᴜɴᴋɴᴡᴏɴ 2eaf1d693a
db: migrate access table to use GORM (#6371) 2020-10-06 15:43:28 +08:00
ᴜɴᴋɴᴡᴏɴ ca3330cecd
lfs: ask client to always send the same value for the HTTP header (#6369) 2020-10-04 18:40:39 +08:00
ᴜɴᴋɴᴡᴏɴ a6bd00f807
locale: sync from Crowdin (#6367) 2020-10-04 08:37:55 +08:00
Zhukov Roman be86d67e81
Add git diff timeout in app config (#6348)
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-09-29 23:12:17 +08:00
Jeff 23823e9698
markup: render SHA links without branch prefix (#6350)
Co-authored-by: Zhukov Roman <zhukov.roman@gmail.com>
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-09-29 23:07:16 +08:00
ᴜɴᴋɴᴡᴏɴ 7bc3ee49aa
cmd/serv: use different log files for ORMs in hook mode (#6361) 2020-09-29 22:26:07 +08:00
ᴜɴᴋɴᴡᴏɴ 83a89127fd
action: fix issue reference regexp and error handling (#6352) 2020-09-26 16:23:05 +08:00
ᴜɴᴋɴᴡᴏɴ 3af91d7cfd
auth: decouple types and functions from db (#6320) 2020-09-20 11:19:02 +08:00
ᴜɴᴋɴᴡᴏɴ c56db8f2c4
db: create new session for MySQL after changing attribute (#6338) 2020-09-18 18:37:47 +08:00
ᴜɴᴋɴᴡᴏɴ dda1092e74
gitutil: infer submodule with baseURL when it is a relative path (#6337) 2020-09-18 16:19:31 +08:00
ᴜɴᴋɴᴡᴏɴ 56eac57222
locale: sync from Crowdin (#6333) 2020-09-16 23:15:57 +08:00
ᴜɴᴋɴᴡᴏɴ 594a2dc41f
web: correctly serving go-get pages for subdirs (#6318)
* web: correctly serving go-get page for subdirs

* Update CHANGELOG

* Fix golint error
2020-09-09 20:14:48 +08:00