gitea

Lerking/gitea

Fork 0

mirror of https://github.com/go-gitea/gitea.git synced 2026-01-05 20:02:07 +01:00

Files

History

Lunny Xiao 20cf4b7849

release-nightly / nightly-binary (push) Has been cancelled

Details

release-nightly / nightly-docker-rootful (push) Has been cancelled

Details

release-nightly / nightly-docker-rootless (push) Has been cancelled

Details

Fix various permission & login related bugs (#36002 ) (#36004 )

Backport #36002 

Permission & protection check:

- Fix Delete Release permission check
- Fix Update Pull Request with rebase branch protection check
- Fix Issue Dependency permission check
- Fix Delete Comment History ID check

Information leaking:

- Show unified message for non-existing user and invalid password
    - Fix #35984
- Don't expose release draft to non-writer users.
- Make API returns signature's email address instead of the user
profile's.

Auth & Login:

- Avoid GCM OAuth2 attempt when OAuth2 is disabled
    - Fix #35510

---------

Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

2025-11-22 12:33:48 +00:00

source

Fix avatar upload error handling (#35887 ) (#35890 )

2025-11-07 11:25:34 +08:00

auth_test.go

Enable addtional linters (#34085 )

2025-04-01 10:14:01 +00:00

auth_token_test.go

Remove incorrect "db.DefaultContext" usages (#35366 )

2025-08-28 03:52:43 +00:00

auth_token.go

Enhanced auth token / remember me (#27606 )