Gusted 16419b6fc3 fix: disallow basic authorization when security keys are enrolled ... - This unifies the security behavior of enrolling security keys with enrolling TOTP as a 2FA method. When TOTP is enrolled, you cannot use basic authorization (user:password) to make API request on behalf of the user, this is now also the case when you enroll security keys. - The usage of access tokens are the only method to make API requests on behalf of the user when a 2FA method is enrolled for the user. - Integration test added. (cherry picked from commit e6bbecb02d)		2024-11-15 12:02:14 +01:00
..
actions	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
agit	fix(agit): run full pr checks on force-push	2024-08-13 18:26:33 +00:00
asymkey	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
attachment	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
auth	fix: disallow basic authorization when security keys are enrolled	2024-11-15 12:02:14 +01:00
automerge	Simplify how git repositories are opened (#28937)	2024-01-27 21:09:51 +01:00
context	fix: extend forgejo_auth_token table	2024-11-15 12:02:14 +01:00
contexttest	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
convert	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
cron	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
doctor	fix: extend forgejo_auth_token table	2024-11-15 12:02:14 +01:00
externalaccount	Final round of db.DefaultContext refactor (#27587)	2023-10-14 08:37:24 +00:00
feed	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
forgejo	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
forms	Return access_denied error when an OAuth2 request is denied (#30974)	2024-06-05 17:19:22 +02:00
gitdiff	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
indexer	Update issue indexer after merging a PR (#30715)	2024-05-14 16:00:57 +02:00
issue	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
lfs	Fix #31185 try fix lfs download from bitbucket failed (#31201)	2024-08-18 07:01:03 +02:00
mailer	fix: extend forgejo_auth_token table	2024-11-15 12:02:14 +01:00
markup	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
migrations	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
mirror	test(mock): DeletePushMirrors & AddPushMirrorRemote	2024-06-02 15:45:31 +00:00
notify	Clean up log messages (#30313)	2024-04-15 16:11:14 +02:00
org	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
packages	[SEC] Ensure propagation of API scopes for Conan and Container authentication	2024-08-28 08:44:58 +00:00
pull	fix(agit): run full pr checks on force-push	2024-08-13 18:26:33 +00:00
release	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
repository	security: add permission check to 'delete branch after merge'	2024-10-28 06:32:10 +01:00
secrets	Refactor deletion (#28610)	2023-12-25 21:25:29 +01:00
task	Fix incorrect ctx usage in defer function (#27740)	2023-10-22 14:12:27 +00:00
uinotification	Penultimate round of db.DefaultContext refactor (#27414)	2023-10-11 04:24:07 +00:00
user	fix: extend forgejo_auth_token table	2024-11-15 12:02:14 +01:00
webhook	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
wiki	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00