wxiaoguang 0148d03f21

Enforce two-factor auth (2FA: TOTP or WebAuthn) (#34187) ...

Fix #880

Design:

1. A global setting `security.TWO_FACTOR_AUTH`.
* To support org-level config, we need to introduce a better "owner
setting" system first (in the future)
2. A user without 2FA can login and may explore, but can NOT read or
write to any repositories via API/web.
3. Keep things as simple as possible.
* This option only aggressively suggest users to enable their 2FA at the
moment, it does NOT guarantee that users must have 2FA before all other
operations, it should be good enough for real world use cases.
* Some details and tests could be improved in the future since this
change only adds a check and seems won't affect too much.

---------

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>

2025-04-28 15:31:59 -07:00

..

actions

Get changed files based on merge base when checking pull_request actions trigger (#34106)

2025-04-03 05:13:16 +00:00

activitypub

Enable tenv and testifylint rules (#32852)

2024-12-15 10:41:29 +00:00

analyze

Refactor older tests to use testify (#33140)

2025-01-09 09:21:47 +08:00

assetfs

Enable testifylint rules (#34075)

2025-03-31 01:53:48 -04:00

auth

Fix pam auth test regression (#33169)

2025-01-09 21:09:11 +08:00

avatar

Enable addtional linters (#34085)

2025-04-01 10:14:01 +00:00

badge

Add flat-square action badge style (#34062)

2025-04-01 09:42:10 +00:00

base

Add material icons for file list (#33837)

2025-03-10 15:57:17 +08:00

cache

Add cache for common package queries (#22491)

2025-04-13 09:40:36 +00:00

cachegroup

Cache GPG keys, emails and users when list commits (#34086)

2025-04-09 16:34:38 +00:00

charset

Enable testifylint rules (#34075)

2025-03-31 01:53:48 -04:00

container

Refactor sidebar assignee&milestone&project selectors (#32465)

2024-11-11 04:07:54 +08:00

csv

Enable testifylint rules (#34075)

2025-03-31 01:53:48 -04:00

dump

Enable testifylint rules (#34075)

2025-03-31 01:53:48 -04:00

emoji

Refactor older tests to use testify (#33140)

2025-01-09 09:21:47 +08:00

eventsource

Refactor older tests to use testify (#33140)

2025-01-09 09:21:47 +08:00

fileicon

Keep file tree view icons consistent with icon theme (#33921)

2025-04-06 19:35:08 +00:00

generate

Refactor JWT secret generating & decoding code (#29172)

2024-02-16 15:18:30 +00:00

git

Add API endpoint to request contents of multiple files simultaniously (#34139)

2025-04-22 01:20:11 +08:00

gitrepo

Refactor Branch struct in package modules/git (#33980)

2025-04-02 17:31:32 +00:00

globallock

Enable addtional linters (#34085)

2025-04-01 10:14:01 +00:00

graceful

Enable testifylint rules (#34075)

2025-03-31 01:53:48 -04:00

gtprof

enable staticcheck QFxxxx rules (#34064)

2025-03-29 17:32:28 -04:00

hcaptcha

Consume hcaptcha and pwn deps (#22610)

2023-01-29 09:49:51 -06:00

highlight

Enable testifylint rules (#34075)

2025-03-31 01:53:48 -04:00

hostmatcher

Support allowed hosts for migrations to work with proxy (#32025)

2024-09-11 05:47:00 +00:00

htmlutil

Refactor HTMLFormat, update chroma render, fix js error (#33136)

2025-01-08 03:44:32 +00:00

httpcache

Refactor cache-control (#33861)

2025-03-13 07:04:50 +08:00

httplib

Make public URL generation configurable (#34250)

2025-04-22 06:49:37 +08:00

indexer

update go&js dependencies (#34262)

2025-04-23 21:22:40 +00:00

issue/template

Enable addtional linters (#34085)

2025-04-01 10:14:01 +00:00

json

Fix some migration and repo name problems (#33986)

2025-03-24 20:26:58 -07:00

label

feat: Add sorting by exclusive labels (issue priority) (#33206)

2025-04-10 17:18:07 +00:00

lfs

Enable addtional linters (#34085)

2025-04-01 10:14:01 +00:00

lfstransfer

Enable addtional linters (#34085)

2025-04-01 10:14:01 +00:00

log

Enable testifylint rules (#34075)

2025-03-31 01:53:48 -04:00

markup

Valid email address should only start with alphanumeric (#28174)

2025-04-20 19:18:14 +08:00

mcaptcha

Implement FSFE REUSE for golang files (#21840)

2022-11-27 18:20:29 +00:00

metrics

Rename project board -> column to make the UI less confusing (#30170)

2024-05-27 08:59:54 +00:00

migration

remove context from retry downloader (#33871)

2025-03-14 00:28:57 +00:00

nosql

Refactor older tests to use testify (#33140)

2025-01-09 09:21:47 +08:00

optional

Enable testifylint rules (#34075)

2025-03-31 01:53:48 -04:00

options

Use a general approach to access custom/static/builtin assets (#24022)

2023-04-12 18:16:45 +08:00

packages

Uniform all temporary directories and allow customizing temp path (#32352)

2025-04-08 16:15:28 +00:00

paginator

Only use prev and next buttons for pagination on user dashboard (#33981)

2025-03-23 19:52:43 +00:00

pprof

Implement FSFE REUSE for golang files (#21840)

2022-11-27 18:20:29 +00:00

private

Enable addtional linters (#34085)

2025-04-01 10:14:01 +00:00

process

Use test context in tests and new loop system in benchmarks (#33648)

2025-02-20 09:57:40 +00:00

proxy

Use proxy for pull mirror (#22771)

2023-02-11 08:39:50 +08:00

proxyprotocol

Enable addtional linters (#34085)

2025-04-01 10:14:01 +00:00

public

Refactor cache-control (#33861)

2025-03-13 07:04:50 +08:00

queue

Enable testifylint rules (#34075)

2025-03-31 01:53:48 -04:00

recaptcha

Implement FSFE REUSE for golang files (#21840)

2022-11-27 18:20:29 +00:00

references

Enable testifylint rules (#34075)

2025-03-31 01:53:48 -04:00

regexplru

Enable testifylint rules (#34075)

2025-03-31 01:53:48 -04:00

repository

Move and rename UpdateRepository (#34136)

2025-04-12 18:22:18 +00:00

reqctx

Add material icons for file list (#33837)

2025-03-10 15:57:17 +08:00

secret

Upgrade golangci-lint to v1.64.5 (#33654)

2025-02-21 00:05:40 +08:00

session

Enforce two-factor auth (2FA: TOTP or WebAuthn) (#34187)

2025-04-28 15:31:59 -07:00

setting

Enforce two-factor auth (2FA: TOTP or WebAuthn) (#34187)

2025-04-28 15:31:59 -07:00

sitemap

Fix sitemap (#22272)

2022-12-30 23:31:00 +08:00

ssh

Uniform all temporary directories and allow customizing temp path (#32352)

2025-04-08 16:15:28 +00:00

storage

Enable addtional linters (#34085)

2025-04-01 10:14:01 +00:00

structs

Update token creation API swagger documentation (#34288)

2025-04-27 05:32:15 +00:00

svg

Add sub issue list support (#32940)

2024-12-24 01:54:19 +00:00

sync

Use global lock instead of NewExclusivePool to allow distributed lock between multiple Gitea instances (#31813)

2024-09-06 10:12:41 +00:00

system

Enable testifylint rules (#34075)

2025-03-31 01:53:48 -04:00

tailmsg

Support performance trace (#32973)

2025-01-21 18:57:07 +00:00

tempdir

Uniform all temporary directories and allow customizing temp path (#32352)

2025-04-08 16:15:28 +00:00

templates

Fix various trivial frontend problems (#34263)

2025-04-24 09:11:54 +08:00

test

Enable addtional linters (#34085)

2025-04-01 10:14:01 +00:00

testlogger

Use test context in tests and new loop system in benchmarks (#33648)

2025-02-20 09:57:40 +00:00

timeutil

Refactor DateUtils and merge TimeSince (#32409)

2024-11-04 11:30:00 +00:00

translation

Enable testifylint rules (#34075)

2025-03-31 01:53:48 -04:00

turnstile

Add new captcha: cloudflare turnstile (#22369)

2023-02-05 15:29:03 +08:00

typesniffer

Add avif image file support (#32508)

2024-11-15 00:55:50 +00:00

updatechecker

Enable addtional linters (#34085)

2025-04-01 10:14:01 +00:00

uri

Implement FSFE REUSE for golang files (#21840)

2022-11-27 18:20:29 +00:00

user

Refactor older tests to use testify (#33140)

2025-01-09 09:21:47 +08:00

util

Uniform all temporary directories and allow customizing temp path (#32352)

2025-04-08 16:15:28 +00:00

validation

Enable addtional linters (#34085)

2025-04-01 10:14:01 +00:00

web

Enable addtional linters (#34085)

2025-04-01 10:14:01 +00:00

webhook

Add workflow_job webhook (#33694)

2025-03-11 10:40:38 -07:00

zstd

Support compression for Actions logs (#31761)

2024-08-09 10:10:30 +08:00