aboutsummaryrefslogtreecommitdiffstats
path: root/models/twofactor.go
Commit message (Collapse)AuthorAgeFilesLines
* Use single shared random string generation function (#15741)silverwind2021-05-101-3/+3
| | | | | | | | | | | | | | | | | | * Use single shared random string generation function - Replace 3 functions that do the same with 1 shared one - Use crypto/rand over math/rand for a stronger RNG - Output only alphanumerical for URL compatibilty Fixes: #15536 * use const string method * Update modules/avatar/avatar.go Co-authored-by: a1012112796 <1012112796@qq.com> Co-authored-by: a1012112796 <1012112796@qq.com>
* Attachments: Add extension support, allow all types for releases (#12465)silverwind2020-10-051-46/+5
| | | | | | | | | | | | | | | | | | | | | * Attachments: Add extension support, allow all types for releases - Add support for file extensions, matching the `accept` attribute of `<input type="file">` - Add support for type wildcard mime types, e.g. `image/*` - Create repository.release.ALLOWED_TYPES setting (default unrestricted) - Change default for attachment.ALLOWED_TYPES to a list of extensions - Split out POST /attachments into two endpoints for issue/pr and releases to prevent circumvention of allowed types check Fixes: https://github.com/go-gitea/gitea/pull/10172 Fixes: https://github.com/go-gitea/gitea/issues/7266 Fixes: https://github.com/go-gitea/gitea/pull/12460 Ref: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/input/file#Unique_file_type_specifiers * rename function * extract GET routes out of RepoMustNotBeArchived Co-authored-by: Lauris BH <lauris@nix.lv>
* Use ID or Where to instead directly use Get when load object from database ↵Lunny Xiao2020-06-171-2/+2
| | | | | | | | | | | | (#11925) * Use ID or Where to instead directly use Get when load object from database * Apply suggestions from code review Co-authored-by: 6543 <6543@obermui.de> Co-authored-by: 6543 <6543@obermui.de> Co-authored-by: zeripath <art27@cantab.net>
* Display ui time with customize time location (#7792)Lunny Xiao2019-08-151-7/+7
| | | | | | | | | | | | | | | | | | * display ui time with customize time location * fix lint * rename UILocation to DefaultUILocation * move time related functions to modules/timeutil * fix tests * fix tests * fix build * fix swagger
* Fix double-generation of scratch token (#6832) (#6833)SagePtr2019-05-021-5/+1
|
* Switch plaintext scratch tokens to use hash instead (#4331)techknowlogick2018-07-271-7/+18
|
* Do not allow to reuse TOTP passcode (#3878)Lauris BH2018-05-021-6/+7
|
* Implements generator cli for secrets (#3531)Codruț Constantin Gușoi2018-02-181-2/+2
| | | Signed-off-by: Codruț Constantin Gușoi <codrut.gusoi@gmail.com>
* go back to using CFB for AES decryption/encryption for 2FA (#3274)Morgan Bazalgette2017-12-311-3/+44
|
* Refactor struct's time to remove unnecessary memory usage (#3142)Lunny Xiao2017-12-111-12/+3
| | | | | | | | | | | | | | * refactor struct's time to remove unnecessary memory usage * use AsTimePtr simple code * fix tests * fix time compare * fix template on gpg * use AddDuration instead of Add
* Various wiki bug fixes (#2996)Ethan Koenig2017-11-281-2/+2
| | | | | | * Update macaron * Various wiki bug fixes
* Replace deprecated Id method with ID (#2655)Ethan Koenig2017-10-051-2/+2
|
* Use AfterLoad instead of AfterSet on Structs (#2628)Lunny Xiao2017-10-011-10/+5
| | | | | | | | * use AfterLoad instead of AfterSet on Structs * fix the comments on AfterLoad * fix the comments on action AfterLoad
* Use created & updated instead BeforeInsert & BeforeUpdate (#2482)Lunny Xiao2017-09-131-12/+2
| | | | | | | | | | | | * use created & updated instead BeforeInsert & BeforeUpdate * fix vendor checksum * only show generated SQL when development mode * remove extra update column updated_unix * remove trace config
* Two factor authentication support (#630)Andrew2017-01-161-0/+141
* Initial commit for 2FA support Signed-off-by: Andrew <write@imaginarycode.com> * Add vendored files * Add missing depends * A few clean ups * Added improvements, proper encryption * Better encryption key * Simplify "key" generation * Make 2FA enrollment page more robust * Fix typo * Rename twofa/2FA to TwoFactor * UNIQUE INDEX -> UNIQUE