5 Commits

Include renames

Author	SHA1	Message	Date
silverwind	8abda62312	test: consolidate Go tests (#39962) ... Consolidate all Go tests. Coverage is identical to before. Go tests are around 5% faster while being 7% smaller. No non-test code is touched.	2026-10-24 13:48:19 +00:00
Shivansh Gargandwxiaoguang	f270534e83	fix: validate "scope" for OAuth2, "state" for OpenID (#39642) ... 1. Fixes: https://github.com/go-gitea/gitea/issues/39641 * The OAuth2 authorize/grant endpoint accepted and persisted arbitrary scope strings without validation, unlike personal access token creation which rejects unknown scopes. Normalize and validate form.Scope before creating or updating a grant, ignore invalid scopes * `// TODO: at the moment invalid tokens are treated as "all" to avoid breaking 1.22 behavior` is fixed. 2. To avoid CSRF attack for OpenID endpoint, add a state check --------- Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>	2026-10-12 20:57:41 +00:00
wxiaoguang	47d48eb208	chore: fix form string abuse (#38106)	2026-06-14 18:26:22 +00:00
Lunny Xiao	61b1a39efe	chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)	2026-05-26 15:49:31 -07:00
Lunny Xiao	ed5720af2a	Fix openid setting check (#36346)	2026-01-13 12:44:29 +00:00