forgejo/tests
Gusted 16419b6fc3
fix: disallow basic authorization when security keys are enrolled
- This unifies the security behavior of enrolling security keys with
enrolling TOTP as a 2FA method. When TOTP is enrolled, you cannot use
basic authorization (user:password) to make API request on behalf of the
user, this is now also the case when you enroll security keys.
- The usage of access tokens are the only method to make API requests on
behalf of the user when a 2FA method is enrolled for the user.
- Integration test added.

(cherry picked from commit e6bbecb02d)
2024-11-15 12:02:14 +01:00
..
e2e [v7.0/forgejo] fix(ui): handle out-of-bounds end line in code selection (#4820) 2024-08-05 05:56:37 +00:00
fuzz
gitea-lfs-meta
gitea-repositories-meta tests(integration): add TestPullMergeBranchProtect 2024-06-02 22:05:08 +02:00
integration fix: disallow basic authorization when security keys are enrolled 2024-11-15 12:02:14 +01:00
testdata/data/attachments/a/0
mssql.ini.tmpl
mysql.ini.tmpl
pgsql.ini.tmpl
sqlite.ini.tmpl
test_utils.go enable linter testifylint on v7 (#4572) 2024-07-30 19:42:06 +00:00