4 Commits

Author	SHA1	Message	Date
wxiaoguang	0148d03f21	Enforce two-factor auth (2FA: TOTP or WebAuthn) (#34187) ... Fix #880 Design: 1. A global setting `security.TWO_FACTOR_AUTH`. * To support org-level config, we need to introduce a better "owner setting" system first (in the future) 2. A user without 2FA can login and may explore, but can NOT read or write to any repositories via API/web. 3. Keep things as simple as possible. * This option only aggressively suggest users to enable their 2FA at the moment, it does NOT guarantee that users must have 2FA before all other operations, it should be good enough for real world use cases. * Some details and tests could be improved in the future since this change only adds a check and seems won't affect too much. --------- Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>	2025-04-28 15:31:59 -07:00
Cheng	9de443ced2	chore: use errors.New to replace fmt.Errorf with no parameters will much better (#30621) ... use errors.New to replace fmt.Errorf with no parameters will much better	2024-04-21 19:44:03 +00:00
JakobDev	ebe803e514	Penultimate round of db.DefaultContext refactor (#27414) ... Part of #27065 --------- Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>	2023-10-11 04:24:07 +00:00
Nanguan Lin	70f8d10fc5	move the gitea admin subcommands into separate files (#27307) ... As title. Probably it's better to put those sub cmd to different dirs. Will do that in the future.	2023-09-27 12:25:38 +00:00