auth

Sep 5, 2024

Changes in this version

type AccessTokenScope

+ func (s AccessTokenScope) HasAnyScope(scopes ...AccessTokenScope) (bool, error)

May 27, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ var ErrAuthTokenNotExist = util.NewNotExistErrorf("auth token does not exist")

+ func DeleteAuthTokenByID(ctx context.Context, id string) error

+ func DeleteAuthTokensByUserID(ctx context.Context, uid int64) error

+ func DeleteExpiredAuthTokens(ctx context.Context) error

+ func InsertAuthToken(ctx context.Context, t *AuthToken) error

+ func UpdateAuthTokenByID(ctx context.Context, t *AuthToken) error

+ type AuthToken struct

+ ExpiresUnix timeutil.TimeStamp

+ ID string

+ TokenHash string

+ UserID int64

+ func GetAuthTokenByID(ctx context.Context, id string) (*AuthToken, error)

+ type FindOAuth2ApplicationsOptions struct

+ IsGlobal bool

+ OwnerID int64

+ func (opts FindOAuth2ApplicationsOptions) ToConds() builder.Cond

+ func (opts FindOAuth2ApplicationsOptions) ToOrders() string

+ type FindSourcesOptions struct

+ IsActive optional.Option[bool]

+ LoginType Type

+ func (opts FindSourcesOptions) ToConds() builder.Cond

type ListAccessTokensOptions

+ func (opts ListAccessTokensOptions) ToConds() builder.Cond

+ func (opts ListAccessTokensOptions) ToOrders() string

Apr 27, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Mar 28, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Sep 20, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Apr 16, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Mar 25, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Mar 22, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Mar 13, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Feb 26, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Feb 22, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

type Source

+ func GetOAuth2ProviderSources(onlyActive bool) ([]*Source, error)

Feb 1, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jan 17, 2024 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Dec 21, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Dec 12, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Nov 26, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Nov 14, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ func BuiltinApplications() map[string]*BuiltinOAuth2Application

+ func Init(ctx context.Context) error

+ type BuiltinOAuth2Application struct

+ ConfigName string

+ DisplayName string

+ RedirectURIs []string

Oct 19, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Oct 6, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Sep 20, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jun 7, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Nov 26, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Oct 3, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Sep 8, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Aug 20, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jul 29, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jul 22, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jul 16, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ const AccessTokenScopeCategoryActivityPub

+ const AccessTokenScopeCategoryAdmin

+ const AccessTokenScopeCategoryIssue

+ const AccessTokenScopeCategoryMisc

+ const AccessTokenScopeCategoryNotification

+ const AccessTokenScopeCategoryOrganization

+ const AccessTokenScopeCategoryPackage

+ const AccessTokenScopeCategoryRepository

+ const AccessTokenScopeCategoryUser

+ var AllAccessTokenScopeCategories = []AccessTokenScopeCategory

+ func ContainsCategory(categories []AccessTokenScopeCategory, category AccessTokenScopeCategory) bool

type AccessToken

+ func (t *AccessToken) DisplayPublicOnly() bool

type AccessTokenScope

+ const AccessTokenScopePublicOnly

+ const AccessTokenScopeReadActivityPub

+ const AccessTokenScopeReadAdmin

+ const AccessTokenScopeReadIssue

+ const AccessTokenScopeReadMisc

+ const AccessTokenScopeReadNotification

+ const AccessTokenScopeReadOrganization

+ const AccessTokenScopeReadRepository

+ const AccessTokenScopeWriteActivityPub

+ const AccessTokenScopeWriteAdmin

+ const AccessTokenScopeWriteIssue

+ const AccessTokenScopeWriteMisc

+ const AccessTokenScopeWriteNotification

+ const AccessTokenScopeWriteOrganization

+ const AccessTokenScopeWriteRepository

+ const AccessTokenScopeWriteUser

+ func GetRequiredScopes(level AccessTokenScopeLevel, scopeCategories ...AccessTokenScopeCategory) []AccessTokenScope

+ func (s AccessTokenScope) PublicOnly() (bool, error)

+ type AccessTokenScopeCategory int

+ type AccessTokenScopeLevel int

+ const NoAccess

+ const Read

+ const Write

+ func GetScopeLevelFromAccessMode(mode perm.AccessMode) AccessTokenScopeLevel

Jun 24, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jun 23, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jun 7, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Feb 22, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jul 4, 2023 GO-2024-3056

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

May 3, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Apr 27, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Apr 13, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Mar 20, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

type AccessToken

+ Scope AccessTokenScope

+ type AccessTokenScope string

+ const AccessTokenScopeAdminApplication

+ const AccessTokenScopeAdminGPGKey

+ const AccessTokenScopeAdminOrg

+ const AccessTokenScopeAdminOrgHook

+ const AccessTokenScopeAdminPublicKey

+ const AccessTokenScopeAdminRepoHook

+ const AccessTokenScopeAll

+ const AccessTokenScopeDeletePackage

+ const AccessTokenScopeDeleteRepo

+ const AccessTokenScopeNotification

+ const AccessTokenScopePackage

+ const AccessTokenScopePublicRepo

+ const AccessTokenScopeReadApplication

+ const AccessTokenScopeReadGPGKey

+ const AccessTokenScopeReadOrg

+ const AccessTokenScopeReadPackage

+ const AccessTokenScopeReadPublicKey

+ const AccessTokenScopeReadRepoHook

+ const AccessTokenScopeReadUser

+ const AccessTokenScopeRepo

+ const AccessTokenScopeRepoStatus

+ const AccessTokenScopeSudo

+ const AccessTokenScopeUser

+ const AccessTokenScopeUserEmail

+ const AccessTokenScopeUserFollow

+ const AccessTokenScopeWriteApplication

+ const AccessTokenScopeWriteGPGKey

+ const AccessTokenScopeWriteOrg

+ const AccessTokenScopeWritePackage

+ const AccessTokenScopeWritePublicKey

+ const AccessTokenScopeWriteRepoHook

+ func (s AccessTokenScope) HasScope(scope AccessTokenScope) (bool, error)

+ func (s AccessTokenScope) Normalize() (AccessTokenScope, error)

+ func (s AccessTokenScope) Parse() (AccessTokenScopeBitmap, error)

+ func (s AccessTokenScope) StringSlice() []string

+ type AccessTokenScopeBitmap uint64

+ const AccessTokenScopeAdminApplicationBits

+ const AccessTokenScopeAdminGPGKeyBits

+ const AccessTokenScopeAdminOrgBits

+ const AccessTokenScopeAdminOrgHookBits

+ const AccessTokenScopeAdminPublicKeyBits

+ const AccessTokenScopeAdminRepoHookBits

+ const AccessTokenScopeAllBits

+ const AccessTokenScopeDeletePackageBits

+ const AccessTokenScopeDeleteRepoBits

+ const AccessTokenScopeNotificationBits

+ const AccessTokenScopePackageBits

+ const AccessTokenScopePublicRepoBits

+ const AccessTokenScopeReadApplicationBits

+ const AccessTokenScopeReadGPGKeyBits

+ const AccessTokenScopeReadOrgBits

+ const AccessTokenScopeReadPackageBits

+ const AccessTokenScopeReadPublicKeyBits

+ const AccessTokenScopeReadRepoHookBits

+ const AccessTokenScopeReadUserBits

+ const AccessTokenScopeRepoBits

+ const AccessTokenScopeRepoStatusBits

+ const AccessTokenScopeSudoBits

+ const AccessTokenScopeUserBits

+ const AccessTokenScopeUserEmailBits

+ const AccessTokenScopeUserFollowBits

+ const AccessTokenScopeWriteApplicationBits

+ const AccessTokenScopeWriteGPGKeyBits

+ const AccessTokenScopeWriteOrgBits

+ const AccessTokenScopeWritePackageBits

+ const AccessTokenScopeWritePublicKeyBits

+ const AccessTokenScopeWriteRepoHookBits

+ func (bitmap AccessTokenScopeBitmap) HasScope(scope AccessTokenScope) (bool, error)

+ func (bitmap AccessTokenScopeBitmap) ToScope() AccessTokenScope

Mar 5, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Feb 22, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Oct 26, 2022 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Feb 21, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Feb 20, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jan 23, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jan 19, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jan 17, 2023 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Dec 29, 2022 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Nov 24, 2022 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Oct 25, 2022 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jun 18, 2022 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Dec 21, 2022 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ func AccessTokenByNameExists(token *AccessToken) (bool, error)

+ func CountAccessTokens(opts ListAccessTokensOptions) (int64, error)

+ func DeleteAccessTokenByID(id, userID int64) error

+ func IsErrAccessTokenEmpty(err error) bool

+ func IsErrAccessTokenNotExist(err error) bool

+ func NewAccessToken(t *AccessToken) error

+ func UpdateAccessToken(t *AccessToken) error

+ type AccessToken struct

+ CreatedUnix timeutil.TimeStamp

+ HasRecentActivity bool

+ HasUsed bool

+ ID int64

+ Name string

+ Token string

+ TokenHash string

+ TokenLastEight string

+ TokenSalt string

+ UID int64

+ UpdatedUnix timeutil.TimeStamp

+ func GetAccessTokenBySHA(token string) (*AccessToken, error)

+ func ListAccessTokens(opts ListAccessTokensOptions) ([]*AccessToken, error)

+ func (t *AccessToken) AfterLoad()

type CreateOAuth2ApplicationOptions

+ ConfidentialClient bool

+ type ErrAccessTokenEmpty struct

+ func (err ErrAccessTokenEmpty) Error() string

+ func (err ErrAccessTokenEmpty) Unwrap() error

+ type ErrAccessTokenNotExist struct

+ Token string

+ func (err ErrAccessTokenNotExist) Error() string

+ func (err ErrAccessTokenNotExist) Unwrap() error

type ErrOAuthApplicationNotFound

+ func (err ErrOAuthApplicationNotFound) Unwrap() error

type ErrOAuthClientIDInvalid

+ func (err ErrOAuthClientIDInvalid) Unwrap() error

type ErrSourceAlreadyExist

+ func (err ErrSourceAlreadyExist) Unwrap() error

type ErrSourceNotExist

+ func (err ErrSourceNotExist) Unwrap() error

type ErrTwoFactorNotEnrolled

+ func (err ErrTwoFactorNotEnrolled) Unwrap() error

type ErrWebAuthnCredentialNotExist

+ func (err ErrWebAuthnCredentialNotExist) Unwrap() error

+ type ListAccessTokensOptions struct

+ Name string

+ UserID int64

type OAuth2Application

+ ConfidentialClient bool

type UpdateOAuth2ApplicationOptions

+ ConfidentialClient bool

Oct 15, 2022 GO-2023-1894 +1 more

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Sep 6, 2022 GO-2022-1065 +2 more

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Aug 18, 2022 GO-2022-1065 +3 more

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jul 30, 2022 GO-2022-1065 +3 more

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ func DeleteOAuth2RelictsByUserID(ctx context.Context, userID int64) error

Jul 19, 2022 GO-2022-1065 +3 more

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jun 20, 2022 GO-2022-1065 +3 more

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jan 19, 2022 GO-2022-1065 +3 more

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jun 21, 2022 GO-2022-1065 +3 more

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

May 16, 2022 GO-2022-0612 +5 more

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

May 2, 2022 GO-2022-0612 +5 more

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Apr 20, 2022 GO-2022-0450 +6 more

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Mar 24, 2022 GO-2022-0450 +6 more

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Mar 14, 2022 GO-2022-0450 +7 more

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Mar 3, 2022 GO-2022-0442 +9 more

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Feb 24, 2022 GO-2022-0442 +9 more

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Feb 6, 2022 GO-2022-0442 +9 more

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jan 30, 2022 GO-2022-0442 +9 more

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ var Names = map[Type]string

+ func CleanupSessions(maxLifetime int64) error

+ func CountSessions() (int64, error)

+ func CountSources() int64

+ func CreateSource(source *Source) error

+ func DeleteCredential(id, userID int64) (bool, error)

+ func DeleteOAuth2Application(id, userid int64) error

+ func DeleteTwoFactorByID(id, userID int64) error

+ func DestroySession(key string) error

+ func ExistSession(key string) (bool, error)

+ func ExistsWebAuthnCredentialsForUID(uid int64) (bool, error)

+ func HasTwoFactorByUID(uid int64) (bool, error)

+ func HasWebAuthnRegistrationsByUID(uid int64) (bool, error)

+ func HashToken(token, salt string) string

+ func IsErrOAuthApplicationNotFound(err error) bool

+ func IsErrOauthClientIDInvalid(err error) bool

+ func IsErrSourceAlreadyExist(err error) bool

+ func IsErrSourceInUse(err error) bool

+ func IsErrSourceNotExist(err error) bool

+ func IsErrTwoFactorNotEnrolled(err error) bool

+ func IsErrWebAuthnCredentialNotExist(err error) bool

+ func IsSSPIEnabled() bool

+ func NewTwoFactor(t *TwoFactor) error

+ func RegisterTypeConfig(typ Type, exemplar Config)

+ func RevokeOAuth2Grant(grantID, userID int64) error

+ func UpdateSession(key string, data []byte) error

+ func UpdateSource(source *Source) error

+ func UpdateTwoFactor(t *TwoFactor) error

+ func WebAuthnCredentials(userID int64) ([]webauthn.Credential, error)

+ type Config interface

+ type CreateOAuth2ApplicationOptions struct

+ Name string

+ RedirectURIs []string

+ UserID int64

+ type ErrOAuthApplicationNotFound struct

+ ID int64

+ func (err ErrOAuthApplicationNotFound) Error() string

+ type ErrOAuthClientIDInvalid struct

+ ClientID string

+ func (err ErrOAuthClientIDInvalid) Error() string

+ type ErrSourceAlreadyExist struct

+ Name string

+ func (err ErrSourceAlreadyExist) Error() string

+ type ErrSourceInUse struct

+ ID int64

+ func (err ErrSourceInUse) Error() string

+ type ErrSourceNotExist struct

+ ID int64

+ func (err ErrSourceNotExist) Error() string

+ type ErrTwoFactorNotEnrolled struct

+ UID int64

+ func (err ErrTwoFactorNotEnrolled) Error() string

+ type ErrWebAuthnCredentialNotExist struct

+ CredentialID string

+ ID int64

+ func (err ErrWebAuthnCredentialNotExist) Error() string

+ type HasTLSer interface

+ HasTLS func() bool

+ type OAuth2Application struct

+ ClientID string

+ ClientSecret string

+ CreatedUnix timeutil.TimeStamp

+ ID int64

+ Name string

+ RedirectURIs []string

+ UID int64

+ UpdatedUnix timeutil.TimeStamp

+ func CreateOAuth2Application(opts CreateOAuth2ApplicationOptions) (*OAuth2Application, error)

+ func GetOAuth2ApplicationByClientID(clientID string) (app *OAuth2Application, err error)

+ func GetOAuth2ApplicationByID(id int64) (app *OAuth2Application, err error)

+ func GetOAuth2ApplicationsByUserID(userID int64) (apps []*OAuth2Application, err error)

+ func ListOAuth2Applications(uid int64, listOptions db.ListOptions) ([]*OAuth2Application, int64, error)

+ func UpdateOAuth2Application(opts UpdateOAuth2ApplicationOptions) (*OAuth2Application, error)

+ func (app *OAuth2Application) ContainsRedirectURI(redirectURI string) bool

+ func (app *OAuth2Application) CreateGrant(userID int64, scope string) (*OAuth2Grant, error)

+ func (app *OAuth2Application) GenerateClientSecret() (string, error)

+ func (app *OAuth2Application) GetGrantByUserID(userID int64) (*OAuth2Grant, error)

+ func (app *OAuth2Application) PrimaryRedirectURI() string

+ func (app *OAuth2Application) TableName() string

+ func (app *OAuth2Application) ValidateClientSecret(secret []byte) bool

+ type OAuth2AuthorizationCode struct

+ Code string

+ CodeChallenge string

+ CodeChallengeMethod string

+ Grant *OAuth2Grant

+ GrantID int64

+ ID int64

+ RedirectURI string

+ ValidUntil timeutil.TimeStamp

+ func GetOAuth2AuthorizationByCode(code string) (*OAuth2AuthorizationCode, error)

+ func (code *OAuth2AuthorizationCode) GenerateRedirectURI(state string) (redirect *url.URL, err error)

+ func (code *OAuth2AuthorizationCode) Invalidate() error

+ func (code *OAuth2AuthorizationCode) TableName() string

+ func (code *OAuth2AuthorizationCode) ValidateCodeChallenge(verifier string) bool

+ type OAuth2Grant struct

+ Application *OAuth2Application

+ ApplicationID int64

+ Counter int64

+ CreatedUnix timeutil.TimeStamp

+ ID int64

+ Nonce string

+ Scope string

+ UpdatedUnix timeutil.TimeStamp

+ UserID int64

+ func GetOAuth2GrantByID(id int64) (*OAuth2Grant, error)

+ func GetOAuth2GrantsByUserID(uid int64) ([]*OAuth2Grant, error)

+ func (grant *OAuth2Grant) GenerateNewAuthorizationCode(redirectURI, codeChallenge, codeChallengeMethod string) (*OAuth2AuthorizationCode, error)

+ func (grant *OAuth2Grant) IncreaseCounter() error

+ func (grant *OAuth2Grant) ScopeContains(scope string) bool

+ func (grant *OAuth2Grant) SetNonce(nonce string) error

+ func (grant *OAuth2Grant) TableName() string

+ type RegisterableSource interface

+ RegisterSource func() error

+ UnregisterSource func() error

+ type SSHKeyProvider interface

+ ProvidesSSHKeys func() bool

+ type Session struct

+ Data []byte

+ Expiry timeutil.TimeStamp

+ Key string

+ func ReadSession(key string) (*Session, error)

+ func RegenerateSession(oldKey, newKey string) (*Session, error)

+ type SkipVerifiable interface

+ IsSkipVerify func() bool

+ type Source struct

+ Cfg convert.Conversion

+ CreatedUnix timeutil.TimeStamp

+ ID int64

+ IsActive bool

+ IsSyncEnabled bool

+ Name string

+ Type Type

+ UpdatedUnix timeutil.TimeStamp

+ func ActiveSources(tp Type) ([]*Source, error)

+ func AllActiveSources() ([]*Source, error)

+ func GetActiveOAuth2ProviderSources() ([]*Source, error)

+ func GetActiveOAuth2SourceByName(name string) (*Source, error)

+ func GetSourceByID(id int64) (*Source, error)

+ func Sources() ([]*Source, error)

+ func SourcesByType(loginType Type) ([]*Source, error)

+ func (Source) TableName() string

+ func (source *Source) BeforeSet(colName string, val xorm.Cell)

+ func (source *Source) HasTLS() bool

+ func (source *Source) IsDLDAP() bool

+ func (source *Source) IsLDAP() bool

+ func (source *Source) IsOAuth2() bool

+ func (source *Source) IsPAM() bool

+ func (source *Source) IsSMTP() bool

+ func (source *Source) IsSSPI() bool

+ func (source *Source) SkipVerify() bool

+ func (source *Source) TypeName() string

+ func (source *Source) UseTLS() bool

+ type SourceSettable interface

+ SetAuthSource func(*Source)

+ type TwoFactor struct

+ CreatedUnix timeutil.TimeStamp

+ ID int64

+ LastUsedPasscode string

+ ScratchHash string

+ ScratchSalt string

+ Secret string

+ UID int64

+ UpdatedUnix timeutil.TimeStamp

+ func GetTwoFactorByUID(uid int64) (*TwoFactor, error)

+ func (t *TwoFactor) GenerateScratchToken() (string, error)

+ func (t *TwoFactor) SetSecret(secretString string) error

+ func (t *TwoFactor) ValidateTOTP(passcode string) (bool, error)

+ func (t *TwoFactor) VerifyScratchToken(token string) bool

+ type Type int

+ const DLDAP

+ const LDAP

+ const NoType

+ const OAuth2

+ const PAM

+ const Plain

+ const SMTP

+ const SSPI

+ func (typ Type) Int() int

+ func (typ Type) String() string

+ type UpdateOAuth2ApplicationOptions struct

+ ID int64

+ Name string

+ RedirectURIs []string

+ UserID int64

+ type UseTLSer interface

+ UseTLS func() bool

+ type WebAuthnCredential struct

+ AAGUID []byte

+ AttestationType string

+ CloneWarning bool

+ CreatedUnix timeutil.TimeStamp

+ CredentialID string

+ ID int64

+ LowerName string

+ Name string

+ PublicKey []byte

+ SignCount uint32

+ UpdatedUnix timeutil.TimeStamp

+ UserID int64

+ func CreateCredential(userID int64, name string, cred *webauthn.Credential) (*WebAuthnCredential, error)

+ func GetWebAuthnCredentialByCredID(userID int64, credID string) (*WebAuthnCredential, error)

+ func GetWebAuthnCredentialByID(id int64) (*WebAuthnCredential, error)

+ func GetWebAuthnCredentialByName(uid int64, name string) (*WebAuthnCredential, error)

+ func (cred *WebAuthnCredential) AfterLoad(session *xorm.Session)

+ func (cred *WebAuthnCredential) BeforeInsert()

+ func (cred *WebAuthnCredential) BeforeUpdate()

+ func (cred *WebAuthnCredential) UpdateSignCount() error

+ func (cred WebAuthnCredential) TableName() string

+ type WebAuthnCredentialList []*WebAuthnCredential

+ func GetWebAuthnCredentialsByUID(uid int64) (WebAuthnCredentialList, error)

+ func (list WebAuthnCredentialList) ToCredentials() []webauthn.Credential

Jan 19, 2022 GO-2022-0442 +9 more

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea