silverwind 92044649a0 fix(auth): set WebAuthn user verification per request (#38810) ...

Backport #38805

Registration omitted `userVerification`, so Chromium raised the
credential to credProtect level 3 and the authenticator then hid it from
the second-factor login, which asked for `discouraged`. Registration and
each login now set their own value, with `preferred` on the second
factor so credentials already registered at level 3 keep working without
re-enrollment.

Also add relevant e2e test coverage for webauthn, one test is chromium
only because Firefox lacks the APIs needed.

Fixes https://github.com/go-gitea/gitea/issues/33531
Fixes https://github.com/go-gitea/gitea/issues/36019
Fixes https://github.com/go-gitea/gitea/issues/38139

2026-08-08 10:11:04 +00:00

..

components

fix: make Actions log parser support multiple line message encoding (#38659) (#38664)

2026-07-27 14:47:14 +00:00

features

fix(auth): set WebAuthn user verification per request (#38810)

2026-08-08 10:11:04 +00:00

markup

chore: upgrade eslint plugins, remove eslint-plugin-github (#38046)

2026-06-21 08:07:13 +02:00

modules

fix: update npm dependencies, fix misc issues (#38257)

2026-06-29 12:59:14 +02:00

render

fix: update npm dependencies, fix misc issues (#38257)

2026-06-29 12:59:14 +02:00

utils

fix(actions): don't swallow HTML entities into linkified URLs (#38239)

2026-06-28 19:37:16 +08:00

vendor

Show edit page confirmation dialog on tree view file change (#36130)

2025-12-20 02:29:39 +01:00

webcomponents

chore: upgrade eslint plugins, remove eslint-plugin-github (#38046)

2026-06-21 08:07:13 +02:00

bootstrap.ts

Migrate from webpack to vite (#37002)

2026-03-29 10:24:30 +00:00

eventsource.sharedworker.ts

Merge some standalone Vite entries into index.js (#37085)

2026-04-05 19:13:34 +00:00

external-render-frontend.ts

fix: csp regressions (#38047)

2026-06-12 08:36:05 +08:00

external-render-helper.test.ts

fix: csp regressions (#38047)

2026-06-12 08:36:05 +08:00

external-render-helper.ts

fix: csp regressions (#38047)

2026-06-12 08:36:05 +08:00

globals.d.ts

fix(deps): update npm dependencies (#38203)

2026-06-24 21:13:13 +00:00

globals.ts

Remove htmx (#37224)

2026-04-15 17:26:26 +00:00

iife.ts

Migrate from webpack to vite (#37002)

2026-03-29 10:24:30 +00:00

index.ts

fix(actions): address workflow status badge review feedback (#38241)

2026-06-28 10:53:01 +00:00

svg.test.ts

Remove "class-name" from svg icon (#33540)

2025-02-09 22:39:54 +02:00

svg.ts

feat(actions): show run status on browser tab favicon (#38071)

2026-06-15 06:56:26 +02:00

swagger.ts

fix(frontend): resolve Vite assets by manifest source path (#37836)

2026-05-28 06:14:52 +00:00

types.ts

Extend issue context popup beyond markdown content (#36908)

2026-04-23 13:58:31 +00:00

utils.test.ts

fix: correct full url when using sub-path (#38712) (#38716)

2026-07-30 19:34:26 +00:00

utils.ts

fix: correct full url when using sub-path (#38712) (#38716)

2026-07-30 19:34:26 +00:00

vitest.setup.ts

fix: csp regressions (#38047)

2026-06-12 08:36:05 +08:00