user

Feb 5, 2025

Changes in this version

+ func IsGhostUserName(name string) bool

+ func IsGiteaActionsUserName(name string) bool

type User

+ func GetSystemUserByName(name string) *User

+ func (u *User) IsGiteaActions() bool

Jan 9, 2025

Changes in this version

+ const SignupIP

+ const SignupUserAgent

+ func EnsureLinkExternalToUser(ctx context.Context, external *ExternalLoginUser) error

+ func GenerateUserTimeLimitCode(opts *TimeLimitCodeOptions, u *User) string

+ func IterateExternalLogin(ctx context.Context, opts FindExternalUserOptions, ...) error

type FindExternalUserOptions

+ Expired bool

+ HasRefreshToken bool

+ LoginSourceID int64

+ type Meta struct

+ InitialIP string

+ InitialUserAgent string

type SearchEmailResult

+ ID int64

+ type TimeLimitCodeOptions struct

+ NewEmail string

+ Purpose TimeLimitCodePurpose

+ type TimeLimitCodePurpose string

+ const TimeLimitCodeActivateAccount

+ const TimeLimitCodeActivateEmail

+ const TimeLimitCodeResetPassword

type User

+ func VerifyUserTimeLimitCode(ctx context.Context, opts *TimeLimitCodeOptions, code string) (user *User)

+ func (u *User) EmailTo() string

Oct 9, 2024

Changes in this version

type User

+ func (u *User) IsUser() bool

May 27, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ const GhostUserLowerName

+ const GhostUserName

+ var ErrBlockOrganization = util.NewInvalidArgumentErrorf("cannot block an organization")

+ var ErrBlockedUser = util.NewPermissionDeniedErrorf("user is blocked")

+ var ErrCanNotBlock = util.NewInvalidArgumentErrorf("cannot block the user")

+ var ErrCanNotUnblock = util.NewInvalidArgumentErrorf("cannot unblock the user")

+ func AddUserBadge(ctx context.Context, u *User, badge *Badge) error

+ func AddUserBadges(ctx context.Context, u *User, badges []*Badge) error

+ func AdminCreateUser(ctx context.Context, u *User, overwriteDefault ...*CreateUserOverwriteOptions) (err error)

+ func ChangeInactivePrimaryEmail(ctx context.Context, uid int64, oldEmailAddr, newEmailAddr string) error

+ func CreateBadge(ctx context.Context, badge *Badge) error

+ func DeleteBadge(ctx context.Context, badge *Badge) error

+ func DisabledFeaturesWithLoginType(user *User) *container.Set[string]

+ func IsEmailDomainAllowed(email string) bool

+ func IsFeatureDisabledWithLoginType(user *User, feature string) bool

+ func IsUserBlockedBy(ctx context.Context, blockee *User, blockerIDs ...int64) bool

+ func MakeActiveEmailPrimary(ctx context.Context, emailID int64) error

+ func MakeInactiveEmailPrimary(ctx context.Context, emailID int64) error

+ func NormalizeUserName(s string) (string, error)

+ func RemoveAllUserBadges(ctx context.Context, u *User) error

+ func RemoveUserBadge(ctx context.Context, u *User, badge *Badge) error

+ func RemoveUserBadges(ctx context.Context, u *User, badges []*Badge) error

+ func UpdateBadge(ctx context.Context, badge *Badge) error

+ func UpdateBlockingNote(ctx context.Context, id int64, note string) error

+ func UpdateEmailAddress(ctx context.Context, email *EmailAddress) error

+ func ValidateEmailForAdmin(email string) error

type Badge

+ Slug string

+ func GetBadge(ctx context.Context, slug string) (*Badge, error)

+ type Blocking struct

+ Blockee *User

+ BlockeeID int64

+ Blocker *User

+ BlockerID int64

+ CreatedUnix timeutil.TimeStamp

+ ID int64

+ Note string

+ func FindBlockings(ctx context.Context, opts *FindBlockingOptions) ([]*Blocking, int64, error)

+ func GetBlocking(ctx context.Context, blockerID, blockeeID int64) (*Blocking, error)

+ func (*Blocking) TableName() string

+ type BlockingList []*Blocking

+ func (blocks BlockingList) LoadAttributes(ctx context.Context) error

type EmailAddress

+ func GetEmailAddressByEmail(ctx context.Context, email string) (*EmailAddress, error)

+ func GetEmailAddressOfUser(ctx context.Context, email string, uid int64) (*EmailAddress, error)

+ func GetPrimaryEmailAddressOfUser(ctx context.Context, uid int64) (*EmailAddress, error)

+ func InsertEmailAddress(ctx context.Context, email *EmailAddress) (*EmailAddress, error)

+ type FindBlockingOptions struct

+ BlockeeID int64

+ BlockerID int64

+ func (opts *FindBlockingOptions) ToConds() builder.Cond

type FindExternalUserOptions

+ OrderBy string

+ UserID int64

+ func (opts FindExternalUserOptions) ToConds() builder.Cond

+ func (opts FindExternalUserOptions) ToOrders() string

type User

+ func (u *User) GetCompleteName() string

Apr 27, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Mar 28, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Sep 20, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Apr 16, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Mar 25, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Mar 22, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Mar 13, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

type SearchUserOptions

+ SupportedSortOrders container.Set[string]

Feb 26, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Feb 22, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Feb 1, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jan 17, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ func IsLastAdminUser(ctx context.Context, user *User) bool

type CountUserFilter

+ IsAdmin util.OptionalBool

Dec 21, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Dec 12, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ const GhostUserID

Nov 26, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Nov 14, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

type SearchUserOptions

+ IncludeReserved bool

Oct 19, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Oct 6, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Sep 20, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jun 7, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Nov 26, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Oct 3, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Sep 8, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Aug 20, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

type User

+ func (u *User) GetPlaceholderEmail() string

Jul 29, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jul 22, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jul 16, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ const SettingsKeyShowOutdatedComments

+ func IsErrUserIsNotLocal(err error) bool

+ func IsErrUsernameNotChanged(err error) bool

+ type ErrUserIsNotLocal struct

+ Name string

+ UID int64

+ func (err ErrUserIsNotLocal) Error() string

type ErrUserSettingIsNotExist

+ func (err ErrUserSettingIsNotExist) Unwrap() error

+ type ErrUsernameNotChanged struct

+ Name string

+ UID int64

+ func (err ErrUsernameNotChanged) Error() string

type SearchUserOptions

+ LoginName string

+ SourceID int64

type User

+ func GetPossibleUserByIDs(ctx context.Context, ids []int64) ([]*User, error)

+ func GetUserByIDs(ctx context.Context, ids []int64) ([]*User, error)

+ func (u *User) IsBot() bool

+ func (u *User) LogString() string

type UserType

+ const UserTypeBot

+ const UserTypeOrganizationReserved

+ const UserTypeRemoteUser

+ const UserTypeUserReserved

Jun 24, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jun 23, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jun 7, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Feb 22, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jul 4, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ func ValidateUser(u *User, cols ...string) error

May 3, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Apr 27, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Apr 13, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Mar 20, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ const ActionsEmail

+ const ActionsFullName

+ const ActionsUserID

+ const ActionsUserName

type User

+ func GetPossibleUserByID(ctx context.Context, id int64) (*User, error)

+ func NewActionsUser() *User

+ func (u *User) CanForkRepo() bool

+ func (u *User) IsActions() bool

+ func (u *User) IsIndividual() bool

Mar 5, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Feb 22, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Oct 26, 2022 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Feb 21, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Feb 20, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ func SetMustChangePassword(ctx context.Context, all, mustChangePassword bool, include, exclude []string) (int64, error)

Jan 23, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jan 19, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jan 17, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Dec 29, 2022 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Nov 24, 2022 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Oct 25, 2022 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jun 18, 2022 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Dec 21, 2022 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ const EmailNotificationsAndYourOwn

+ const UserActivityPubPrivPem

+ const UserActivityPubPubPem

+ func CountWrongUserType() (int64, error)

+ func ExistsWithAvatarAtStoragePath(ctx context.Context, storagePath string) (bool, error)

+ func FixWrongUserType() (int64, error)

+ func GetOrderByName() string

+ func IncrUserRepoNum(ctx context.Context, userID int64) error

+ func IsErrUserSettingIsNotExist(err error) bool

+ type Badge struct

+ Description string

+ ID int64

+ ImageURL string

+ func GetUserBadges(ctx context.Context, u *User) ([]*Badge, int64, error)

type ErrEmailAddressNotExist

+ func (err ErrEmailAddressNotExist) Unwrap() error

type ErrEmailAlreadyUsed

+ func (err ErrEmailAlreadyUsed) Unwrap() error

type ErrEmailCharIsNotSupported

+ func (err ErrEmailCharIsNotSupported) Unwrap() error

type ErrEmailInvalid

+ func (err ErrEmailInvalid) Unwrap() error

type ErrExternalLoginUserAlreadyExist

+ func (err ErrExternalLoginUserAlreadyExist) Unwrap() error

type ErrExternalLoginUserNotExist

+ func (err ErrExternalLoginUserNotExist) Unwrap() error

type ErrOpenIDAlreadyUsed

+ func (err ErrOpenIDAlreadyUsed) Unwrap() error

type ErrPrimaryEmailCannotDelete

+ func (err ErrPrimaryEmailCannotDelete) Unwrap() error

type ErrUserAlreadyExist

+ func (err ErrUserAlreadyExist) Unwrap() error

type ErrUserInactive

+ func (err ErrUserInactive) Unwrap() error

type ErrUserNotExist

+ func (err ErrUserNotExist) Unwrap() error

type ErrUserProhibitLogin

+ func (err ErrUserProhibitLogin) Unwrap() error

type ErrUserRedirectNotExist

+ func (err ErrUserRedirectNotExist) Unwrap() error

+ type ErrUserSettingIsNotExist struct

+ Key string

+ func (err ErrUserSettingIsNotExist) Error() string

type Setting

+ func GetSetting(uid int64, key string) (*Setting, error)

+ func GetSettingNoCache(uid int64, key string) (*Setting, error)

+ type UserBadge struct

+ BadgeID int64

+ ID int64

+ UserID int64

Oct 15, 2022 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Sep 6, 2022 GO-2022-1065 +2 more

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Aug 18, 2022 GO-2022-1065 +3 more

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jul 30, 2022 GO-2022-1065 +3 more

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ const SettingsKeyDiffWhitespaceBehavior

+ const SettingsKeyHiddenCommentTypes

+ func BuildCanSeeUserCondition(actor *User) builder.Cond

+ func DeleteUserSetting(userID int64, key string) error

+ func GetUserNameByID(ctx context.Context, id int64) (string, error)

+ func GetUserSetting(userID int64, key string, def ...string) (string, error)

+ func GetUserSettings(uid int64, keys []string) (map[string]*Setting, error)

+ func IsUserVisibleToViewer(ctx context.Context, u, viewer *User) bool

+ func SetUserSetting(userID int64, key, value string) error

+ type CountUserFilter struct

+ LastLoginSince *int64

+ type ExternalUserMigrated interface

+ GetExternalID func() int64

+ GetExternalName func() string

+ type ExternalUserRemappable interface

+ GetUserID func() int64

+ RemapExternalUser func(externalName string, externalID, userID int64) error

Jul 19, 2022 GO-2022-1065 +3 more

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jun 20, 2022 GO-2022-1065 +3 more

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jan 19, 2022 GO-2022-1065 +3 more

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jun 21, 2022 GO-2022-1065 +3 more

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

May 16, 2022 GO-2022-0612 +5 more

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

May 2, 2022 GO-2022-0612 +5 more

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

type CreateUserOverwriteOptions

+ AllowCreateOrganization util.OptionalBool

+ EmailNotificationsPreference *string

+ IsActive util.OptionalBool

+ IsRestricted util.OptionalBool

+ KeepEmailPrivate util.OptionalBool

+ MaxRepoCreation *int

+ Theme *string

Apr 20, 2022 GO-2022-0450 +6 more

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Mar 24, 2022 GO-2022-0450 +6 more

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Mar 14, 2022 GO-2022-0450 +7 more

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ func IsErrEmailCharIsNotSupported(err error) bool

+ type ErrEmailCharIsNotSupported struct

+ Email string

+ func (err ErrEmailCharIsNotSupported) Error() string

Mar 3, 2022 GO-2022-0442 +9 more

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

type SearchUserOptions

+ ExtraParamStrings map[string]string

Feb 24, 2022 GO-2022-0442 +9 more

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Feb 6, 2022 GO-2022-0442 +9 more

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jan 30, 2022 GO-2022-0442 +9 more

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ const EmailNotificationsDisabled

+ const EmailNotificationsEnabled

+ const EmailNotificationsOnMention

+ const SaltByteLength

+ var AvailableHashAlgorithms = []string

+ var ErrEmailNotActivated = errors.New("E-mail address has not been activated")

+ var ErrOpenIDNotExist = errors.New("OpenID is unknown")

+ func ActivateEmail(email *EmailAddress) error

+ func ActivateUserEmail(userID int64, email string, activate bool) (err error)

+ func AddEmailAddress(email *EmailAddress) error

+ func AddEmailAddresses(emails []*EmailAddress) error

+ func AddUserOpenID(openid *UserOpenID) error

+ func ChangeUserName(u *User, newUserName string) (err error)

+ func CountUsers() int64

+ func CreateUser(u *User, overwriteDefault ...*CreateUserOverwriteOptions) (err error)

+ func DeleteEmailAddress(email *EmailAddress) (err error)

+ func DeleteEmailAddresses(emails []*EmailAddress) (err error)

+ func DeleteInactiveEmailAddresses(ctx context.Context) error

+ func DeleteSetting(setting *Setting) error

+ func DeleteUserOpenID(openid *UserOpenID) (err error)

+ func DeleteUserRedirect(ctx context.Context, userName string) error

+ func FollowUser(userID, followID int64) (err error)

+ func GenerateRandomAvatar(u *User) error

+ func GenerateRandomAvatarCtx(ctx context.Context, u *User) error

+ func GetExternalLogin(externalLoginUser *ExternalLoginUser) (bool, error)

+ func GetSettings(uid int64, keys []string) (map[string]*Setting, error)

+ func GetUser(user *User) (bool, error)

+ func GetUserAllSettings(uid int64) (map[string]*Setting, error)

+ func GetUserEmailsByNames(names []string) []string

+ func GetUserIDByExternalUserID(provider, userID string) (int64, error)

+ func GetUserIDsByNames(names []string, ignoreNonExistent bool) ([]int64, error)

+ func GetUserNamesByIDs(ids []int64) ([]string, error)

+ func GetUserSalt() (string, error)

+ func IsEmailActive(ctx context.Context, email string, excludeEmailID int64) (bool, error)

+ func IsEmailUsed(ctx context.Context, email string) (bool, error)

+ func IsErrEmailAddressNotExist(err error) bool

+ func IsErrEmailAlreadyUsed(err error) bool

+ func IsErrEmailInvalid(err error) bool

+ func IsErrExternalLoginUserAlreadyExist(err error) bool

+ func IsErrExternalLoginUserNotExist(err error) bool

+ func IsErrOpenIDAlreadyUsed(err error) bool

+ func IsErrPrimaryEmailCannotDelete(err error) bool

+ func IsErrUserAlreadyExist(err error) bool

+ func IsErrUserInactive(err error) bool

+ func IsErrUserNotExist(err error) bool

+ func IsErrUserProhibitLogin(err error) bool

+ func IsErrUserRedirectNotExist(err error) bool

+ func IsFollowing(userID, followID int64) bool

+ func IsUsableUsername(name string) error

+ func IsUserExist(uid int64, name string) (bool, error)

+ func IterateUser(f func(user *User) error) error

+ func LinkExternalToUser(user *User, externalLoginUser *ExternalLoginUser) error

+ func LookupUserRedirect(userName string) (int64, error)

+ func MakeEmailPrimary(email *EmailAddress) error

+ func NewUserRedirect(ctx context.Context, ID int64, oldUserName, newUserName string) error

+ func RemoveAccountLink(user *User, loginSourceID int64) (int64, error)

+ func RemoveAllAccountLinks(ctx context.Context, user *User) error

+ func SetEmailNotifications(u *User, set string) error

+ func SetSetting(setting *Setting) error

+ func ToggleUserOpenIDVisibility(id int64) (err error)

+ func UnfollowUser(userID, followID int64) (err error)

+ func UpdateExternalUserByExternalID(external *ExternalLoginUser) error

+ func UpdateUser(u *User, emailChanged bool) error

+ func UpdateUserCols(ctx context.Context, u *User, cols ...string) error

+ func UpdateUserColsEngine(e db.Engine, u *User, cols ...string) error

+ func UpdateUserDiffViewStyle(u *User, style string) error

+ func UpdateUserSetting(u *User) (err error)

+ func UpdateUserTheme(u *User, themeName string) error

+ func UserPath(userName string) string

+ func ValidateEmail(email string) error

+ type CreateUserOverwriteOptions struct

+ Visibility structs.VisibleType

+ type EmailAddress struct

+ Email string

+ ID int64

+ IsActivated bool

+ IsPrimary bool

+ LowerEmail string

+ UID int64

+ func GetEmailAddressByID(uid, id int64) (*EmailAddress, error)

+ func GetEmailAddresses(uid int64) ([]*EmailAddress, error)

+ func VerifyActiveEmailCode(code, email string) *EmailAddress

+ func (email *EmailAddress) BeforeInsert()

+ type ErrEmailAddressNotExist struct

+ Email string

+ func (err ErrEmailAddressNotExist) Error() string

+ type ErrEmailAlreadyUsed struct

+ Email string

+ func (err ErrEmailAlreadyUsed) Error() string

+ type ErrEmailInvalid struct

+ Email string

+ func (err ErrEmailInvalid) Error() string

+ type ErrExternalLoginUserAlreadyExist struct

+ ExternalID string

+ LoginSourceID int64

+ UserID int64

+ func (err ErrExternalLoginUserAlreadyExist) Error() string

+ type ErrExternalLoginUserNotExist struct

+ LoginSourceID int64

+ UserID int64

+ func (err ErrExternalLoginUserNotExist) Error() string

+ type ErrOpenIDAlreadyUsed struct

+ OpenID string

+ func (err ErrOpenIDAlreadyUsed) Error() string

+ type ErrPrimaryEmailCannotDelete struct

+ Email string

+ func (err ErrPrimaryEmailCannotDelete) Error() string

+ type ErrUserAlreadyExist struct

+ Name string

+ func (err ErrUserAlreadyExist) Error() string

+ type ErrUserInactive struct

+ Name string

+ UID int64

+ func (err ErrUserInactive) Error() string

+ type ErrUserNotExist struct

+ KeyID int64

+ Name string

+ UID int64

+ func (err ErrUserNotExist) Error() string

+ type ErrUserProhibitLogin struct

+ Name string

+ UID int64

+ func (err ErrUserProhibitLogin) Error() string

+ type ErrUserRedirectNotExist struct

+ Name string

+ func (err ErrUserRedirectNotExist) Error() string

+ type ExternalLoginUser struct

+ AccessToken string

+ AccessTokenSecret string

+ AvatarURL string

+ Description string

+ Email string

+ ExpiresAt time.Time

+ ExternalID string

+ FirstName string

+ LastName string

+ Location string

+ LoginSourceID int64

+ Name string

+ NickName string

+ Provider string

+ RawData map[string]interface{}

+ RefreshToken string

+ UserID int64

+ func FindExternalUsersByProvider(opts FindExternalUserOptions) ([]ExternalLoginUser, error)

+ func ListAccountLinks(user *User) ([]*ExternalLoginUser, error)

+ type FindExternalUserOptions struct

+ Limit int

+ Provider string

+ Start int

+ type Follow struct

+ CreatedUnix timeutil.TimeStamp

+ FollowID int64

+ ID int64

+ UserID int64

+ type Redirect struct

+ ID int64

+ LowerName string

+ RedirectUserID int64

+ func (Redirect) TableName() string

+ type SearchEmailOptions struct

+ IsActivated util.OptionalBool

+ IsPrimary util.OptionalBool

+ Keyword string

+ SortType SearchEmailOrderBy

+ type SearchEmailOrderBy string

+ const SearchEmailOrderByEmail

+ const SearchEmailOrderByEmailReverse

+ const SearchEmailOrderByName

+ const SearchEmailOrderByNameReverse

+ func (s SearchEmailOrderBy) String() string

+ type SearchEmailResult struct

+ Email string

+ FullName string

+ IsActivated bool

+ IsPrimary bool

+ Name string

+ UID int64

+ func SearchEmails(opts *SearchEmailOptions) ([]*SearchEmailResult, int64, error)

+ type SearchOrganizationsOptions struct

+ All bool

+ type SearchUserOptions struct

+ Actor *User

+ IsActive util.OptionalBool

+ IsAdmin util.OptionalBool

+ IsProhibitLogin util.OptionalBool

+ IsRestricted util.OptionalBool

+ IsTwoFactorEnabled util.OptionalBool

+ Keyword string

+ OrderBy db.SearchOrderBy

+ SearchByEmail bool

+ Type UserType

+ UID int64

+ Visible []structs.VisibleType

+ type Setting struct

+ ID int64

+ SettingKey string

+ SettingValue string

+ UserID int64

+ func (s *Setting) TableName() string

+ type User struct

+ AllowCreateOrganization bool

+ AllowGitHook bool

+ AllowImportLocal bool

+ Avatar string

+ AvatarEmail string

+ CreatedUnix timeutil.TimeStamp

+ Description string

+ DiffViewStyle string

+ Email string

+ EmailNotificationsPreference string

+ FullName string

+ ID int64

+ IsActive bool

+ IsAdmin bool

+ IsRestricted bool

+ KeepActivityPrivate bool

+ KeepEmailPrivate bool

+ Language string

+ LastLoginUnix timeutil.TimeStamp

+ LastRepoVisibility bool

+ Location string

+ LoginName string

+ LoginSource int64

+ LoginType auth.Type

+ LowerName string

+ MaxRepoCreation int

+ MustChangePassword bool

+ Name string

+ NumFollowers int

+ NumFollowing int

+ NumMembers int

+ NumRepos int

+ NumStars int

+ NumTeams int

+ Passwd string

+ PasswdHashAlgo string

+ ProhibitLogin bool

+ Rands string

+ RepoAdminChangeTeamAccess bool

+ Salt string

+ Theme string

+ Type UserType

+ UpdatedUnix timeutil.TimeStamp

+ UseCustomAvatar bool

+ Visibility structs.VisibleType

+ Website string

+ func GetAdminUser() (*User, error)

+ func GetAllUsers() ([]*User, error)

+ func GetInactiveUsers(ctx context.Context, olderThan time.Duration) ([]*User, error)

+ func GetMaileableUsersByIDs(ids []int64, isMention bool) ([]*User, error)

+ func GetUserByEmail(email string) (*User, error)

+ func GetUserByEmailContext(ctx context.Context, email string) (*User, error)

+ func GetUserByID(id int64) (*User, error)

+ func GetUserByIDCtx(ctx context.Context, id int64) (*User, error)

+ func GetUserByIDEngine(e db.Engine, id int64) (*User, error)

+ func GetUserByName(name string) (*User, error)

+ func GetUserByNameCtx(ctx context.Context, name string) (*User, error)

+ func GetUserByOpenID(uri string) (*User, error)

+ func GetUserFollowers(u *User, listOptions db.ListOptions) ([]*User, error)

+ func GetUserFollowing(u *User, listOptions db.ListOptions) ([]*User, error)

+ func GetUsersBySource(s *auth.Source) ([]*User, error)

+ func GetVerifyUser(code string) (user *User)

+ func NewGhostUser() *User

+ func NewReplaceUser(name string) *User

+ func SearchUsers(opts *SearchUserOptions) (users []*User, _ int64, _ error)

+ func ValidateCommitWithEmail(c *git.Commit) *User

+ func VerifyUserActiveCode(code string) (user *User)

+ func (u *User) AfterLoad()

+ func (u *User) AvatarLink() string

+ func (u *User) AvatarLinkWithSize(size int) string

+ func (u *User) BeforeUpdate()

+ func (u *User) CanCreateOrganization() bool

+ func (u *User) CanCreateRepo() bool

+ func (u *User) CanEditGitHook() bool

+ func (u *User) CanImportLocal() bool

+ func (u *User) ColorFormat(s fmt.State)

+ func (u *User) CustomAvatarRelativePath() string

+ func (u *User) DashboardLink() string

+ func (u *User) DisplayName() string

+ func (u *User) EmailNotifications() string

+ func (u *User) GenerateEmailActivateCode(email string) string

+ func (u *User) GetDisplayName() string

+ func (u *User) GetEmail() string

+ func (u *User) GitName() string

+ func (u *User) HTMLURL() string

+ func (u *User) HomeLink() string

+ func (u *User) IsGhost() bool

+ func (u *User) IsLocal() bool

+ func (u *User) IsMailable() bool

+ func (u *User) IsOAuth2() bool

+ func (u *User) IsOrganization() bool

+ func (u *User) IsPasswordSet() bool

+ func (u *User) IsUploadAvatarChanged(data []byte) bool

+ func (u *User) MaxCreationLimit() int

+ func (u *User) NewGitSig() *git.Signature

+ func (u *User) OrganisationLink() string

+ func (u *User) SetLastLogin()

+ func (u *User) SetPassword(passwd string) (err error)

+ func (u *User) ShortName(length int) string

+ func (u *User) ValidatePassword(passwd string) bool

+ type UserCommit struct

+ User *User

+ func ValidateCommitsWithEmails(oldCommits []*git.Commit) []*UserCommit

+ type UserList []*User

+ func GetUsersByIDs(ids []int64) (UserList, error)

+ func (users UserList) GetTwoFaStatus() map[int64]bool

+ func (users UserList) GetUserIDs() []int64

+ type UserOpenID struct

+ ID int64

+ Show bool

+ UID int64

+ URI string

+ func GetUserOpenIDs(uid int64) ([]*UserOpenID, error)

+ type UserType int

+ const UserTypeIndividual

+ const UserTypeOrganization

Jan 19, 2022 GO-2022-0442 +9 more

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea