silverwind 9dac77fdc2 fix(auth): set WebAuthn user verification per request (#38805) ...

Registration omitted `userVerification`, so Chromium raised the
credential to credProtect level 3 and the authenticator then hid it from
the second-factor login, which asked for `discouraged`. Registration and
each login now set their own value, with `preferred` on the second
factor so credentials already registered at level 3 keep working without
re-enrollment.

Also add relevant e2e test coverage for webauthn, one test chromium only
because Firefox lacks the APIs needed.

Fixes https://github.com/go-gitea/gitea/issues/33531
Fixes https://github.com/go-gitea/gitea/issues/36019
Fixes https://github.com/go-gitea/gitea/issues/38139

2026-08-07 00:11:34 +00:00

..

api

enhance(api): add GitHub-compatible /repos/{owner}/{repo}/commits/{ref} endpoint (#38770)

2026-08-05 17:19:31 +00:00

common

feat(actions): Add Actions API endpoints for workflow run management and logs (#35382)

2026-08-02 12:22:07 +08:00

install

feat: admin impersonates a user (#38614)

2026-07-26 17:26:02 +00:00

private

chore: still keep ctx in git.Repository struct for cat-file batch command (#38684)

2026-07-28 17:04:22 +00:00

utils

Refactor flash message and remove SanitizeHTML template func (#37179)

2026-04-12 10:17:25 +08:00

web

fix(auth): set WebAuthn user verification per request (#38805)

2026-08-07 00:11:34 +00:00

init.go

feat: Replace SSE with WebSocket for UI notifications (#36965)

2026-07-27 07:46:00 +00:00