gitea

Commit Graph

Author	SHA1	Message	Date
wxiaoguang	0148d03f21	Enforce two-factor auth (2FA: TOTP or WebAuthn) (#34187 ) Fix #880 Design: 1. A global setting `security.TWO_FACTOR_AUTH`. * To support org-level config, we need to introduce a better "owner setting" system first (in the future) 2. A user without 2FA can login and may explore, but can NOT read or write to any repositories via API/web. 3. Keep things as simple as possible. * This option only aggressively suggest users to enable their 2FA at the moment, it does NOT guarantee that users must have 2FA before all other operations, it should be good enough for real world use cases. * Some details and tests could be improved in the future since this change only adds a check and seems won't affect too much. --------- Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>	2025-04-28 15:31:59 -07:00
TheFox0x7	0fde8ecd55	Enable testifylint rules (#34075 ) enable testifylint rules disabled in: https://github.com/go-gitea/gitea/pull/34054	2025-03-31 01:53:48 -04:00
Lunny Xiao	c3dedcffa7	Fix basic auth with webauthn (#32531 )	2024-11-16 17:52:16 +00:00
KN4CK3R	838db2f891	Convert to url auth to header auth in tests (#28484 ) Related #28390	2023-12-21 23:59:59 +00:00
KN4CK3R	4f4fea734c	Unify two factor check (#27915 ) Fixes #27819 We have support for two factor logins with the normal web login and with basic auth. For basic auth the two factor check was implemented at three different places and you need to know that this check is necessary. This PR moves the check into the basic auth itself.	2023-11-06 08:22:39 +00:00

5 Commits (4b19e292b954cdbebd1097b0e3d6e53da263b87f)