Beyond coding. We forge.
Find a file
Gusted 06556abb6d fix: delay deleting authorization token ()
- 1ce33aa38d extended the LTA table with a purpose column so it could be extended to other tokens. However some are single-use tokens and should be deleted after use.
- This did not result in a good UX for activating user as they needed to also fill in their passwords and in the case that the password was incorrect the token would no longer be usable.
- This patch modifies the code to allow for a little delay before deleting authorization tokens to do additional verification such as the password check. This cannot be done before the authorization token check as that the authorization token determines who the user is.
- Resolves 
- Adjusted existing unit test.

Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/6937
Reviewed-by: Otto <otto@codeberg.org>
Co-authored-by: Gusted <postmaster@gusted.xyz>
Co-committed-by: Gusted <postmaster@gusted.xyz>
2025-02-17 11:09:33 +00:00
.devcontainer Update ghcr.io/devcontainers/features/git-lfs Docker tag to v1.2.3 2024-10-01 10:02:11 +00:00
.forgejo Update renovate to v39.171.1 (forgejo) () 2025-02-17 07:36:06 +00:00
assets Revert "Update module github.com/minio/minio-go/v7 to v7.0.86 (forgejo) ()" () 2025-02-16 17:47:57 +00:00
build chore: teach lint-locale about locale_next () 2025-02-06 11:16:19 +00:00
cmd chore: teach set module about iter.Seq () 2025-01-24 16:45:46 +00:00
contrib branding: update contrib/legal 2024-12-19 18:55:20 +05:00
custom/conf Use 8 as default value for git lfs concurrency () 2024-12-06 00:17:57 +01:00
docker Update code.forgejo.org/oci/alpine Docker tag to v3.21 (followup) 2024-12-30 15:22:42 +00:00
models fix: delay deleting authorization token () 2025-02-17 11:09:33 +00:00
modules feat: add pronoun privacy option () 2025-02-15 13:07:15 +00:00
options i18n: translation updates from Gitea () 2025-02-16 09:38:39 +00:00
public chore(security): update security.txt with new expiration date () 2025-01-23 16:20:04 +00:00
release-notes chore(release-notes): notes for the week 2025-06 weekly cherry pick 2025-02-02 12:05:46 +01:00
release-notes-published chore(release-notes): fix Forgejo v10.0.1 & v7.0.13 blog post URL (again) [skip ci] () 2025-02-08 13:17:25 +00:00
releases/images [DOCS] RELEASE-NOTES.md 2024-02-05 14:44:32 +01:00
routers fix: delay deleting authorization token () 2025-02-17 11:09:33 +00:00
services feat: add pronoun privacy option () 2025-02-15 13:07:15 +00:00
templates feat(ui): add MIME types for generated archives () 2025-02-16 12:59:28 +00:00
tests fix: delay deleting authorization token () 2025-02-17 11:09:33 +00:00
tools Initial support for localization and pluralization with go-i18n-JSON-v2 format 2025-01-17 11:21:28 +01:00
web_src Lock file maintenance (forgejo) () 2025-02-17 07:40:38 +00:00
.air.toml Reduce air verbosity () 2024-06-23 12:30:09 +02:00
.deadcode-out [gitea] week 2025-07 cherry pick (gitea/main -> forgejo) () 2025-02-11 16:22:58 +00:00
.dockerignore chore: update ignores 2025-01-03 14:41:34 +01:00
.editorconfig fixed indentation style in editorconfig for go.mod 2024-05-14 00:24:18 +02:00
.envrc.example Make direnv optional to let developers use their own direnv configuration 2024-11-06 20:34:49 +01:00
.gitattributes Add interface{} to any replacement to make fmt, exclude *.pb.go () 2024-04-15 20:01:36 +02:00
.gitignore chore(e2e): simplify authentication setup () 2025-01-05 05:17:04 +00:00
.gitmodules cleanup(tests): remove manual testing submodule 2024-04-21 10:13:51 +02:00
.gitpod.yml Remove sqlite-viewer and using database client () 2024-06-09 11:13:39 +02:00
.golangci.yml Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v1.62.0 (forgejo) () 2024-11-11 13:02:01 +00:00
.ignore Add /options/license and /options/gitignore to .ignore () 2024-04-07 15:40:31 +02:00
.mailmap Add .mailmap with aliases for Unknwon (github.com/Unknwon) 2024-08-14 08:26:16 -04:00
.markdownlint.yaml Update JS dependencies () 2023-12-30 05:29:03 +00:00
.npmrc Upgrade to npm lockfile v3 and explicitely set it () 2023-03-18 19:38:10 +01:00
.release-notes-assistant.yaml chore(release-notes): no need to specify they are draft 2024-10-22 06:54:27 +02:00
.spectral.yaml Add spectral linter for Swagger () 2022-07-11 18:07:16 -05:00
.yamllint.yaml fully replace drone with actions () 2023-10-11 06:39:32 +00:00
BSDmakefile Fix build errors on BSD (in BSDMakefile) () 2023-10-13 15:38:27 +00:00
build.go chore: remove unused dependency from build.go 2024-12-23 16:23:28 +01:00
CODEOWNERS [skip ci] chore: adjust i18n entries in CODEOWNERS () 2025-01-26 07:37:50 +00:00
CONTRIBUTING.md docs: replace Developer Guide link with the new Contributor Guide one. 2024-08-26 13:22:39 +03:00
DCO Remove address from DCO () 2023-01-24 18:52:38 +00:00
Dockerfile fix: FromAsCasting warning from Dockerfile () 2025-02-04 07:09:21 +00:00
Dockerfile.rootless enable ssh mirrors in rootless images () 2025-02-11 20:41:01 +00:00
eslint.config.mjs tests(e2e): Refactor various tests 2024-11-13 13:15:37 +01:00
flake.lock Update nixpkgs version in flake 2024-12-08 13:03:16 +01:00
flake.nix install go and gopls in nix flake devShell 2024-12-08 13:04:22 +01:00
go.mod Revert "Update module github.com/minio/minio-go/v7 to v7.0.86 (forgejo) ()" () 2025-02-16 17:47:57 +00:00
go.sum Revert "Update module github.com/minio/minio-go/v7 to v7.0.86 (forgejo) ()" () 2025-02-16 17:47:57 +00:00
LICENSE Forgejo v9.0 is GPLv3+ 2024-08-22 09:09:29 +02:00
main.go [RELEASE] decouple the release name from the version number 2024-02-17 15:27:35 +01:00
Makefile chore: add a make option to disable stripping binaries for debug builds () 2025-02-17 10:19:42 +00:00
package-lock.json Lock file maintenance (forgejo) () 2025-02-17 07:40:38 +00:00
package.json Update dependency happy-dom to v17 (forgejo) () 2025-02-15 15:03:05 +00:00
playwright.config.ts tests(e2e): Prepare for visual regression testing 2024-12-10 18:12:36 +01:00
poetry.lock Lock file maintenance (forgejo) () 2025-02-17 07:40:38 +00:00
poetry.toml Clean up pyproject.toml and package.json, fix poetry options () 2023-06-18 18:13:08 +00:00
pyproject.toml Pin dependency codespell to 2.4.1 (forgejo) () 2025-02-04 06:18:46 +00:00
README.md start of the v10.0 development branch 2024-09-25 11:11:41 +02:00
release-notes-assistant.sh chore(release-notes-assistant): security fix / features come first 2024-11-17 20:03:11 +01:00
RELEASE-NOTES.md chore: fix typos, decap a few i18n strings () 2025-01-24 05:41:59 +00:00
renovate.json chore: consistent docker image and action references () 2025-01-28 15:41:11 +00:00
stylelint.config.js Merge pull request 'Port "Enable declaration-block-no-redundant-longhand-properties ()' () from beowulf/gitea-port-pull-30950 into forgejo 2024-05-14 22:23:54 +00:00
tailwind.config.js fix: Do not scan all Go files for tailwind classes 2024-08-24 15:45:50 +02:00
tsconfig.json Add typescript 2024-10-29 18:15:09 +01:00
vitest.config.ts Add typescript 2024-10-29 18:15:09 +01:00
webpack.config.js Add typescript 2024-10-29 18:15:09 +01:00

Welcome to Forgejo

Hi there! Tired of big platforms playing monopoly? Providing Git hosting for your project, friends, company or community? Forgejo (/for'd͡ʒe.jo/ inspired by forĝejo the Esperanto word for forge) has you covered with its intuitive interface, light and easy hosting and a lot of builtin functionality.

Forgejo was created in 2022 because we think that the project should be owned by an independent community. If you second that, then Forgejo is for you! Our promise: Independent Free/Libre Software forever!

What does Forgejo offer?

If you like any of the following, Forgejo is literally meant for you:

  • Lightweight: Forgejo can easily be hosted on nearly every machine. Running on a Raspberry? Small cloud instance? No problem!
  • Project management: Besides Git hosting, Forgejo offers issues, pull requests, wikis, kanban boards and much more to coordinate with your team.
  • Publishing: Have something to share? Use releases to host your software for download, or use the package registry to publish it for docker, npm and many other package managers.
  • Customizable: Want to change your look? Change some settings? There are many config switches to make Forgejo work exactly like you want.
  • Powerful: Organizations & team permissions, CI integration, Code Search, LDAP, OAuth and much more. If you have advanced needs, Forgejo has you covered.
  • Privacy: From update checker to default settings: Forgejo is built to be privacy first for you and your crew.
  • Federation: (WIP) We are actively working to connect software forges with each other through ActivityPub, and create a collaborative network of personal instances.

Learn more

Dive into the documentation, subscribe to releases and blog post on our website, find us on the Fediverse or hop into our Matrix room if you have any questions or want to get involved.

License

Forgejo is distributed under the terms of the GPL version 3.0 or any later version.

The agreement for this license was documented in June 2023 and implemented during the development of Forgejo v9.0. All Forgejo versions before v9.0 are distributed under the MIT license.

Get involved

If you are interested in making Forgejo better, either by reporting a bug or by changing the governance, please take a look at the contribution guide.