10 Commits

Author	SHA1	Message	Date
wxiaoguang	45c15387b2	Refactor JWT secret generating & decoding code (#29172) ... Old code is not consistent for generating & decoding the JWT secrets. Now, the callers only need to use 2 consistent functions: NewJwtSecretWithBase64 and DecodeJwtSecretBase64 And remove a non-common function Base64FixedDecode from util.go	2024-02-16 15:18:30 +00:00
wxiaoguang	047c69bd85	Improve CLI code and descriptions (#28482) ... * Close #28444 * Actually, it doesn't need to use that trick because it looks like it is not necessary, no user really needs it * Remove the hidden (legacy) "doctor" subcommand and update documents * Fix "actions" usage 	2023-12-15 15:49:01 +00:00
wxiaoguang	ed1be4ca68	Handle base64 decoding correctly to avoid panic (#26483) ... Fix the panic if the "base64 secret" is too long.	2023-08-14 10:30:16 +00:00
wxiaoguang	d0dbe52e76	Refactor to use urfave/cli/v2 (#25959) ... Replace #10912 And there are many new tests to cover the CLI behavior There were some concerns about the "option order in hook scripts" (https://github.com/go-gitea/gitea/pull/10912#issuecomment-1137543314), it's not a problem now. Because the hook script uses `/gitea hook --config=/app.ini pre-receive` format. The "config" is a global option, it can appear anywhere. ---- ## ⚠️ BREAKING ⚠️ This PR does it best to avoid breaking anything. The major changes are: * `gitea` itself won't accept web's options: `--install-port` / `--pid` / `--port` / `--quiet` / `--verbose` .... They are `web` sub-command's options. * Use `./gitea web --pid ....` instead * `./gitea` can still run the `web` sub-command as shorthand, with default options * The sub-command's options must follow the sub-command * Before: `./gitea --sub-opt subcmd` might equal to `./gitea subcmd --sub-opt` (well, might not ...) * After: only `./gitea subcmd --sub-opt` could be used * The global options like `--config` are not affected	2023-07-21 17:28:19 +08:00
flynnnnnnnnnn	e81ccc406b	Implement FSFE REUSE for golang files (#21840) ... Change all license headers to comply with REUSE specification. Fix #16132 Co-authored-by: flynnnnnnnnnn <flynnnnnnnnnn@github> Co-authored-by: John Olheiser <john.olheiser@gmail.com>	2022-11-27 18:20:29 +00:00
KN4CK3R	29695cd6d5	Add asymmetric JWT signing (#16010) ... * Added asymmetric token signing. * Load signing key from settings. * Added optional kid parameter. * Updated documentation. * Add "kid" to token header.	2021-06-17 23:56:46 +02:00
zeripath	c81ab17de9	TrimSpace when reading InternalToken from a file (#11502) ... InternalTokens are fixed as alphanum strings therefore TrimSpace from these. Also use isatty to not add a terminal newline when redirecting generate. Fix #11498 Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: Lauris BH <lauris@nix.lv>	2020-05-20 19:16:06 +03:00
techknowlogick	897927690f	Rename LFS_JWT_SECRET to include OAUTH2 as well (#6826)	2019-05-01 22:32:06 -04:00
Jonas Franz	e777c6bdc6	Integrate OAuth2 Provider (#5378)	2019-03-08 11:42:50 -05:00
Codruț Constantin Gușoi	96c268c0fc	Implements generator cli for secrets (#3531) ... Signed-off-by: Codruț Constantin Gușoi <codrut.gusoi@gmail.com>	2018-02-18 20:14:37 +02:00