wxiaoguang 2f1761e3fe fix(auth): avoid "compromised account" false-alarm when login with remember-me token (#39686) ...

1. Remember the last token that has been rotated and skip its validation
2. Don't alarm when the token mismatch occurs in a short window

2026-10-12 08:44:52 +00:00

..

2fa.go

…

auth_test.go

fix(auth): avoid "compromised account" false-alarm when login with remember-me token (#39686)

2026-10-12 08:44:52 +00:00

auth.go

fix(auth): avoid "compromised account" false-alarm when login with remember-me token (#39686)

2026-10-12 08:44:52 +00:00

linkaccount.go

refactor: move go-chi/captcha into Gitea (#39529)

2026-10-02 22:21:41 +08:00

main_test.go

…

oauth2_provider.go

…

oauth2_wellknown.go

fix: OIDC discovery advertises unsupported id_token response_type (#39498)

2026-10-08 18:10:54 +00:00

oauth_signin_sync.go

…

oauth_test.go

…

oauth.go

fix(api): allow bots with pending password changes (#39551)

2026-10-03 17:22:07 +00:00

openid.go

refactor: move go-chi/captcha into Gitea (#39529)

2026-10-02 22:21:41 +08:00

password.go

fix(api): allow bots with pending password changes (#39551)

2026-10-03 17:22:07 +00:00

webauthn.go

…