gitea

History

Refactor internal routers (partial backport, auth token const time comparing) (#32473 ) (#32479 )

Partially backport #32473. LFS related changes are not in 1.22, so skip
them.

1. Ignore non-existing repos during migrations
2. Improve ReadBatchLine's comment
3. Use `X-Gitea-Internal-Auth` header for internal API calls and make
the comparing constant time (it wasn't a serous problem because in a
real world it's nearly impossible to timing-attack the token, but indeed
security related and good to fix and backport)
4. Fix route mock nil check

2024-11-13 10:26:37 +08:00

api

Fix missing signature key error when pulling Docker images with SERVE_DIRECT enabled (#32365 ) (#32397 )

2024-11-01 03:53:59 +00:00

common

Fix missing images in editor preview due to wrong links (#31299 ) (#31393 )

2024-06-17 15:07:21 +08:00

install

Always load or generate oauth2 jwt secret (#30942 ) (#30978 )

2024-05-14 15:00:38 +00:00

private

Refactor internal routers (partial backport, auth token const time comparing) (#32473 ) (#32479 )