1
0
mirror of https://github.com/go-gitea/gitea.git synced 2025-04-30 12:45:27 +00:00
gitea/routers/api/v1
wxiaoguang 0148d03f21
Enforce two-factor auth (2FA: TOTP or WebAuthn) ()
Fix 

Design:

1. A global setting `security.TWO_FACTOR_AUTH`.
* To support org-level config, we need to introduce a better "owner
setting" system first (in the future)
2. A user without 2FA can login and may explore, but can NOT read or
write to any repositories via API/web.
3. Keep things as simple as possible.
* This option only aggressively suggest users to enable their 2FA at the
moment, it does NOT guarantee that users must have 2FA before all other
operations, it should be good enough for real world use cases.
* Some details and tests could be improved in the future since this
change only adds a check and seems won't affect too much.

---------

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2025-04-28 15:31:59 -07:00
..
activitypub Enable addtional linters () 2025-04-01 10:14:01 +00:00
admin Actions Runner rest api () 2025-04-18 15:22:41 +00:00
misc Refactor markup render to fix various path problems () 2025-04-04 23:45:23 +08:00
notify Refactor error system () 2025-02-16 22:13:17 -08:00
org Actions Runner rest api () 2025-04-18 15:22:41 +00:00
packages Add package version api endpoints () 2025-04-13 20:00:44 +00:00
repo Option to delay conflict checking of old pull requests until page view () 2025-04-24 19:26:57 +00:00
settings Add API endpoint to request contents of multiple files simultaniously () 2025-04-22 01:20:11 +08:00
shared Actions Runner rest api () 2025-04-18 15:22:41 +00:00
swagger Add API endpoint to request contents of multiple files simultaniously () 2025-04-22 01:20:11 +08:00
user Actions Runner rest api () 2025-04-18 15:22:41 +00:00
utils Add API endpoint to request contents of multiple files simultaniously () 2025-04-22 01:20:11 +08:00
api.go Enforce two-factor auth (2FA: TOTP or WebAuthn) () 2025-04-28 15:31:59 -07:00