forgejo/services/doctor
Gusted b770282d45
fix: extend forgejo_auth_token table
- Add a `purpose` column, this allows the `forgejo_auth_token` table to
be used by other parts of Forgejo, while still enjoying the
no-compromise architecture.
- Remove the 'roll your own crypto' time limited code functions and
migrate them to the `forgejo_auth_token` table. This migration ensures
generated codes can only be used for their purpose and ensure they are
invalidated after their usage by deleting it from the database, this
also should help making auditing of the security code easier, as we're
no longer trying to stuff a lot of data into a HMAC construction.
-Helper functions are rewritten to ensure a safe-by-design approach to
these tokens.
- Add the `forgejo_auth_token` to dbconsistency doctor and add it to the
`deleteUser` function.
- TODO: Add cron job to delete expired authorization tokens.
- Unit and integration tests added.

(cherry picked from commit 1ce33aa38d)

v7: Removed migration - XORM can handle this case automatically without migration.

assert.Equal(t, `doesnotexist@example.com`, msgs[0].To) in tests
because v7 does not include the user name to the recipient.
2024-11-15 12:02:14 +01:00
..
authorizedkeys.go fix: correct doctor commands and rename to forgejo 2024-08-27 01:44:00 +00:00
breaking.go Move doctor package from modules to services (#28856) 2024-01-20 10:07:31 +08:00
checkOldArchives.go Move doctor package from modules to services (#28856) 2024-01-20 10:07:31 +08:00
dbconsistency.go fix: extend forgejo_auth_token table 2024-11-15 12:02:14 +01:00
dbversion.go Move doctor package from modules to services (#28856) 2024-01-20 10:07:31 +08:00
doctor.go feat: add optional storage init to doctor commands 2024-04-04 16:56:55 +00:00
fix8312.go Move doctor package from modules to services (#28856) 2024-01-20 10:07:31 +08:00
fix16961.go Fix panic for fixBrokenRepoUnits16961 (#30068) 2024-03-30 07:17:30 +01:00
fix16961_test.go Move doctor package from modules to services (#28856) 2024-01-20 10:07:31 +08:00
heads.go Move doctor package from modules to services (#28856) 2024-01-20 10:07:31 +08:00
lfs.go Refactor LFS GC functions 2024-04-06 07:41:40 +00:00
mergebase.go Move doctor package from modules to services (#28856) 2024-01-20 10:07:31 +08:00
misc.go Simplify how git repositories are opened (#28937) 2024-01-27 21:09:51 +01:00
packages_nuget.go feat: improve nuget nuspec api 2024-04-06 08:32:53 +00:00
paths.go Replace Gitea with Forgejo 2024-07-24 21:40:48 +00:00
push_mirror_consistency.go [GITEA] new doctor check: fix-push-mirrors-without-git-remote (#1853) 2024-02-05 16:09:41 +01:00
repository.go Move doctor package from modules to services (#28856) 2024-01-20 10:07:31 +08:00
storage.go Fix gitea doctor will remove repo-avatar files when execute command storage-archives (#30094) 2024-03-30 07:17:30 +01:00
usertype.go Move doctor package from modules to services (#28856) 2024-01-20 10:07:31 +08:00