Go to file
Rowan Bohde 0b5da27570
allow the actions user to login via the jwt token (#32527) (#32580)
Backport #32527

We have some actions that leverage the Gitea API that began receiving
401 errors, with a message that the user was not found. These actions
use the `ACTIONS_RUNTIME_TOKEN` env var in the actions job to
authenticate with the Gitea API. The format of this env var in actions
jobs changed with go-gitea/gitea/pull/28885 to be a JWT (with a
corresponding update to `act_runner`) Since it was a JWT, the OAuth
parsing logic attempted to parse it as an OAuth token, and would return
user not found, instead of falling back to look up the running task and
assigning it to the actions user.

Make ACTIONS_RUNTIME_TOKEN in action runners could be used, attempting
to parse Oauth JWTs. The code to parse potential old
`ACTION_RUNTIME_TOKEN` was kept in case someone is running an older
version of act_runner that doesn't support the Actions JWT.
2024-11-21 03:18:00 +00:00
.devcontainer Switch to the maintained vitest extension (#29914) 2024-03-20 00:08:42 +01:00
.gitea Update demo site location from try.gitea.io -> demo.gitea.com (#31054) (#31146) 2024-05-29 01:05:07 +00:00
.github use rebuilt mssql-2017 image (#32109) (#32114) 2024-09-23 21:23:04 +00:00
assets Upgrade some dependencies include minio-go (#32166) 2024-10-03 02:08:06 +00:00
build Add interface{} to any replacement to make fmt, exclude *.pb.go (#30461) 2024-04-13 17:32:15 +00:00
cmd Fix panic when cloning with wrong ssh format. (#32076) (#32118) 2024-09-24 01:58:58 +00:00
contrib gitea.service: Remove syslog.target (#29550) 2024-03-02 18:44:43 -05:00
custom/conf Sync up deleted branches & action assets related cleanup documentation (#31022) (#31049) 2024-05-22 11:02:34 -04:00
docker Dockerfile small refactor (#27757) 2023-10-29 09:44:06 +08:00
docs Fix URL In Gitea Actions Badge Docs (#31191) (#31198) 2024-05-31 21:08:04 +08:00
models allow the actions user to login via the jwt token (#32527) (#32580) 2024-11-21 03:18:00 +00:00
modules Fix submodule parsing (#32571) (#32577) 2024-11-21 10:32:19 +08:00
options Refactor CSRF protector (#32057) (#32069) 2024-09-18 17:02:45 +00:00
public Update various logos and unify their filenames (#29637) 2024-03-06 22:20:05 +00:00
routers Refactor find forks and fix possible bugs that weak permissions check (#32528) (#32547) 2024-11-19 04:08:32 +00:00
services allow the actions user to login via the jwt token (#32527) (#32580) 2024-11-21 03:18:00 +00:00
snap bump to use go 1.22 (#29119) 2024-02-14 18:19:57 +00:00
templates Refactor find forks and fix possible bugs that weak permissions check (#32528) (#32547) 2024-11-19 04:08:32 +00:00
tests Refactor find forks and fix possible bugs that weak permissions check (#32528) (#32547) 2024-11-19 04:08:32 +00:00
tools Update misspell to 0.5.1 and add misspellings.csv (#30573) 2024-04-27 08:03:49 +00:00
web_src Fix some places which doesn't repsect org full name setting (#32243) (#32550) 2024-11-19 02:49:29 +00:00
.air.toml Reduce air verbosity (#31417) (#31425) 2024-06-20 04:57:28 +08:00
.changelog.yml Adapt .changelog.yml to new labeling system (#27701) 2023-10-20 00:22:00 +02:00
.dockerignore Add /public/assets/img/webpack to ignore files again (#30451) 2024-04-13 04:28:20 +02:00
.editorconfig Add markdownlint (#20512) 2022-07-28 09:22:47 +08:00
.envrc Enable direnv (#31672) (#31679) 2024-07-23 11:35:28 -04:00
.eslintrc.yaml Enable jquery-related eslint rules that have no violations (#30632) 2024-04-22 14:24:47 +00:00
.gitattributes Add interface{} to any replacement to make fmt, exclude *.pb.go (#30461) 2024-04-13 17:32:15 +00:00
.gitignore Enable direnv (#31672) (#31679) 2024-07-23 11:35:28 -04:00
.gitpod.yml Switch to the maintained vitest extension (#29914) 2024-03-20 00:08:42 +01:00
.golangci.yml Enable more revive linter rules (#30608) 2024-04-22 11:48:42 +00:00
.ignore Add /options/license and /options/gitignore to .ignore (#30219) 2024-03-31 22:22:29 +02:00
.markdownlint.yaml Enable markdownlint no-trailing-punctuation and no-blanks-blockquote (#29214) 2024-02-17 13:18:05 +00:00
.npmrc Upgrade to npm lockfile v3 and explicitely set it (#23561) 2023-03-18 19:38:10 +01:00
.spectral.yaml Add spectral linter for Swagger (#20321) 2022-07-11 18:07:16 -05:00
.yamllint.yaml fully replace drone with actions (#27556) 2023-10-11 06:39:32 +00:00
BSDmakefile Fix build errors on BSD (in BSDMakefile) (#27594) 2023-10-13 15:38:27 +00:00
build.go User/Org Feed render description as per web (#23887) 2023-04-04 04:39:47 +01:00
CHANGELOG-archived.md Fix changelog (main) (#30582) 2024-04-19 06:08:30 +00:00
CHANGELOG.md Add release note for v1.22.3 (#32205) 2024-10-09 11:23:48 +08:00
CODE_OF_CONDUCT.md Add Gitea Community Code of Conduct (#23188) 2023-03-09 10:49:34 +08:00
CONTRIBUTING.md Update demo site location from try.gitea.io -> demo.gitea.com (#31054) (#31146) 2024-05-29 01:05:07 +00:00
crowdin.yml Use Crowdin action for translation sync (#30054) 2024-03-30 18:11:50 +00:00
DCO Remove address from DCO (#22595) 2023-01-24 18:52:38 +00:00
Dockerfile Fix deprecated Dockerfile ENV format (#31450) (#31452) 2024-06-24 00:53:37 +00:00
Dockerfile.rootless Fix deprecated Dockerfile ENV format (#31450) (#31452) 2024-06-24 00:53:37 +00:00
flake.lock Update nix development environment vor v1.22.x (#32495) 2024-11-13 12:40:52 -05:00
flake.nix Add nix flake for dev shell (#30967) (#31310) 2024-06-11 09:50:13 +08:00
go.mod Update github.com/go-enry/go-enry to v2.9.1 (#32295) (#32296) 2024-10-21 02:12:51 +08:00
go.sum Update github.com/go-enry/go-enry to v2.9.1 (#32295) (#32296) 2024-10-21 02:12:51 +08:00
LICENSE
main.go Add some tests to clarify the "must-change-password" behavior (#30693) 2024-04-27 12:23:37 +00:00
MAINTAINERS Apply to become a maintainer (#30151) 2024-03-28 02:47:05 +00:00
Makefile Add TAGS to TEST_TAGS and fix bugs found with gogit (#31791) (#31795) 2024-08-07 15:58:09 +00:00
package-lock.json Upgrade micromatch to 4.0.8 (#31944) 2024-08-30 10:36:49 +08:00
package.json Update webpack to 5.94.0 (#31941) 2024-08-29 16:10:25 +00:00
playwright.config.js Enforce trailing comma in JS on multiline (#30002) 2024-03-22 14:06:53 +00:00
poetry.lock Upgrade tqdm dependency (#30996) (#31000) 2024-05-17 02:39:39 +02:00
poetry.toml Clean up pyproject.toml and package.json, fix poetry options (#25327) 2023-06-18 18:13:08 +00:00
pyproject.toml Update js and py dependencies, bump python (#29561) 2024-03-03 17:23:14 +01:00
README_ZH.md Update demo site location from try.gitea.io -> demo.gitea.com (#31054) (#31146) 2024-05-29 01:05:07 +00:00
README.md Update demo site location from try.gitea.io -> demo.gitea.com (#31054) (#31146) 2024-05-29 01:05:07 +00:00
SECURITY.md fix wording in SECURITY.md (#27463) 2023-10-06 05:17:29 +08:00
stylelint.config.js Update JS dependencies (#30713) 2024-04-27 11:28:28 +00:00
tailwind.config.js Change --border-radius-circle to --border-radius-full (#30936) (#31078) 2024-05-26 13:16:13 +00:00
updates.config.js Update JS and PY deps, lock eslint and related plugins (#30452) 2024-04-13 08:54:36 +00:00
vitest.config.js Switch to happy-dom for testing (#29948) 2024-03-21 14:05:24 +00:00
webpack.config.js replace jquery-minicolors with coloris (#30055) 2024-03-29 04:00:07 +01:00

Gitea

Contribute with Gitpod

View this document in Chinese

Purpose

The goal of this project is to make the easiest, fastest, and most painless way of setting up a self-hosted Git service.

As Gitea is written in Go, it works across all the platforms and architectures that are supported by Go, including Linux, macOS, and Windows on x86, amd64, ARM and PowerPC architectures. This project has been forked from Gogs since November of 2016, but a lot has changed.

For online demonstrations, you can visit demo.gitea.com.

For accessing free Gitea service (with a limited number of repositories), you can visit gitea.com.

To quickly deploy your own dedicated Gitea instance on Gitea Cloud, you can start a free trial at cloud.gitea.com.

Building

From the root of the source tree, run:

TAGS="bindata" make build

or if SQLite support is required:

TAGS="bindata sqlite sqlite_unlock_notify" make build

The build target is split into two sub-targets:

  • make backend which requires Go Stable, the required version is defined in go.mod.
  • make frontend which requires Node.js LTS or greater.

Internet connectivity is required to download the go and npm modules. When building from the official source tarballs which include pre-built frontend files, the frontend target will not be triggered, making it possible to build without Node.js.

More info: https://docs.gitea.com/installation/install-from-source

Using

./gitea web

Note

If you're interested in using our APIs, we have experimental support with documentation.

Contributing

Expected workflow is: Fork -> Patch -> Push -> Pull Request

Note

  1. YOU MUST READ THE CONTRIBUTORS GUIDE BEFORE STARTING TO WORK ON A PULL REQUEST.
  2. If you have found a vulnerability in the project, please write privately to security@gitea.io. Thanks!

Translating

Translations are done through Crowdin. If you want to translate to a new language ask one of the managers in the Crowdin project to add a new language there.

You can also just create an issue for adding a language or ask on discord on the #translation channel. If you need context or find some translation issues, you can leave a comment on the string or ask on Discord. For general translation questions there is a section in the docs. Currently a bit empty but we hope to fill it as questions pop up.

https://docs.gitea.com/contributing/localization

Crowdin

Further information

For more information and instructions about how to install Gitea, please look at our documentation. If you have questions that are not covered by the documentation, you can get in contact with us on our Discord server or create a post in the discourse forum.

We maintain a list of Gitea-related projects at gitea/awesome-gitea.

The official Gitea CLI is developed at gitea/tea.

Authors

Backers

Thank you to all our backers! 🙏 [Become a backer]

Sponsors

Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [Become a sponsor]

FAQ

How do you pronounce Gitea?

Gitea is pronounced /ɡɪti:/ as in "gi-tea" with a hard g.

Why is this not hosted on a Gitea instance?

We're working on it.

License

This project is licensed under the MIT License. See the LICENSE file for the full license text.

Screenshots

Looking for an overview of the interface? Check it out!

Dashboard User Profile Global Issues
Branches Web Editor Activity
New Migration Migrating Pull Request View
Pull Request Dark Diff Review Dark Diff Dark