Commit Graph

150 Commits

Author SHA1 Message Date
91b4dd26db Fix filename unescape 2025-05-14 10:45:20 +02:00
897dc43790 Add LDAP authentication (#470)
* Introduce basic LDAP authentication.

* Reformat LDAP code; use ldap in Git HTTP

* lint

---------

Co-authored-by: Santhosh Raju <santhosh.raju@gmail.com>
2025-05-09 19:32:22 +02:00
dc43fccc04 Style preference tab for user (#467) 2025-05-05 01:31:42 +02:00
8cfaceb303 feat: read admin group from OIDC token claim (#445) 2025-04-02 13:38:11 +02:00
91df15f957 Allow lag between admin invitation creation and test assertion (#452) 2025-03-31 11:53:12 +02:00
efba783c56 Add Meilisearch indexer (#444) 2025-03-19 23:28:04 +01:00
da0b440360 Fix garbled/mojibake text display issues for non-English Unicode characters in browsers. (#441)
* Update util.go

Fix garbled/mojibake text display issues for non-English Unicode characters in browsers.

* add Content-Disposition, help handle file name on download

Author:    awkj <hzzbiu@gmail.com>
2025-03-17 16:22:54 +01:00
d53885c541 Fix test database with go command (#442) 2025-03-17 16:17:53 +01:00
1ec026e191 feat: add Prometheus metrics (#439)
* feat: add Prometheus metrics

* setup metrics using Prometheus client under /metrics endpoint
* add configuration value for metrics
* configure Prometheus middleware for generic metrics
* provide metrics for totals of users, gists and SSH keys
* modify test request to optionally return the response
* provide integration test for Prometheus metrics
* update documentation

* chore: make fmt
2025-03-17 14:30:38 +01:00
7aa8f84eff Search gists on user profile with title, visibility, language & topics (#422) 2025-02-02 18:14:03 +01:00
76fc129c09 Remove memdb for gist init (#421) 2025-01-30 10:46:35 +01:00
62d56cd1c7 Save content form on gist create error (#420) 2025-01-29 16:00:58 +01:00
d363743203 Fix empty password error when trying to change the username (#418) 2025-01-27 00:57:46 +01:00
28c7e75657 Use jdenticon for default avatars (#416) 2025-01-27 00:08:50 +01:00
0609b64cff feat: add MIME type support for raw file serving (#417) 2025-01-26 23:40:59 +01:00
f5b8881d35 Add topics for Gists (#413) 2025-01-24 14:39:42 +01:00
8369cbf2f0 fix: replace path.Join with filepath.Join for file system paths (#414) 2025-01-21 07:46:59 +01:00
662f553d37 Remove CSRF check for Git HTTP packs (#408) 2025-01-20 03:18:28 +01:00
a752e0561d Skip CSRF for embeds (#402)
* Skip CSRF for embeds

The CSRF middleware sets a _csrf cookie also for loading the embed
javascript on third-party sites. With this change no _csrf cookie is set
when loading the embed javascript (regardless if third-party site or
first-party).
2025-01-20 02:18:45 +01:00
f935ee1a7e Refactor server code (#407) 2025-01-20 01:57:39 +01:00
00e3d09cc5 Fix escaping for embed gists (#381) 2024-11-18 02:29:05 +01:00
d537153785 Fix Markdown preview (#368) 2024-11-02 01:05:43 +01:00
7cc2b497ca Use mail handle if oauth nickname is empty (#362) 2024-10-31 18:24:15 +01:00
d5e66d3994 Fix oauth endpoint to support detecting https in 'Forwarded' header, enabling google support (#359) 2024-10-31 15:03:35 +01:00
4fd0832df9 Allow to define secret key & move the secret key file to parent directory (#358) 2024-10-31 14:50:13 +01:00
20372f44e4 Change json response detection (#361) 2024-10-31 14:41:42 +01:00
2bf434f00e Add TOTP MFA (#342) 2024-10-24 23:23:00 +02:00
df226cbd99 Add SVG parser (#346) 2024-10-14 21:20:56 +02:00
3068588111 Send Markdown preview data as form params (#347) 2024-10-14 14:43:12 +02:00
6959929094 Add passkeys support + MFA (#341) 2024-10-07 23:56:32 +02:00
fa8217e27f Separate OAuth unlink URL (#336) 2024-09-22 23:21:43 +02:00
17237713a1 Add Postgres and MySQL databases support (#335) 2024-09-20 16:01:09 +02:00
678fb9938c Add dummy /metrics endpoint (#327) 2024-09-12 01:45:30 +02:00
0ef35fdb36 Improve logger (#322)
* Improve logger

* Update docs
2024-09-09 11:50:05 +02:00
d4e4ae0b43 Cache assets 2024-09-08 03:41:41 +02:00
f881e1c13c Hide change password form when login via password disabled (#314) 2024-09-03 17:48:45 +02:00
069a999297 Fix package cases crash (#313) 2024-09-03 17:15:08 +02:00
d40eb65086 Fix translation string (#293) 2024-06-03 17:14:23 +02:00
38892d8a4a Fix perms for http/ssh clone (#288) 2024-05-28 01:30:08 +02:00
22052bd38f Add a setting to allow anonymous access to individual gists while still RequireLogin everywhere else (#229)
* Add a setting to allow accessing individual gists without auth

This is a middle ground between the existing setting "Require Login",
which requires login to do anything at all, and having it off, which
shows a public list of gists and more generally allows discovering info
about the users/gists of the instance without login.

The idea of this setting is that it is "require login" for everything
except individual gists.

Fixes #228.


Co-authored-by: Thomas Miceli <tho.miceli@gmail.com>
2024-05-12 23:40:11 +02:00
2fd053a077 feat: make edit visibility a toggle (#277)
* feat: make edit visibility a toggle

Signed-off-by: jolheiser <john.olheiser@gmail.com>

* Tweak SVG dropdown icon size & color

---------

Signed-off-by: jolheiser <john.olheiser@gmail.com>
Co-authored-by: Thomas Miceli <tho.miceli@gmail.com>
2024-05-11 21:03:25 +02:00
e439d96e43 Add translation strings (#269) 2024-05-05 00:24:25 +02:00
57273946c3 Fix empty invitation on user creation (#247) 2024-04-04 17:36:18 +02:00
a97d9cdbf4 Use filesystem session store (#240) 2024-04-03 01:56:55 +02:00
ef004675a5 Create invitations for closed registrations (#233) 2024-04-03 01:56:55 +02:00
3f5f4e01f1 Add custom static links (#234) 2024-04-03 01:56:55 +02:00
c185cb8933 Fix new line literal in embed (#237) 2024-04-03 01:56:55 +02:00
1c1e3a8919 Reset a user password using CLI (#226) 2024-04-03 01:56:55 +02:00
fc9a75ce8f Markdown preview (#224) 2024-04-03 01:56:55 +02:00
e1303c95d0 Increase login for 1 year (#222) 2024-04-03 01:56:55 +02:00