mirror of
https://github.com/go-gitea/gitea.git
synced 2026-05-06 04:01:05 +09:00
## Summary
This PR adds support for updating pull mirror authentication via the
repository edit API and UI.
It introduces new mirror authentication fields in _EditRepoOption_,
updates the API logic to safely handle partial credential updates, and
fixes the web settings flow so that the existing remote username is
preserved when only the password is changed.
### What changed
- added _auth_username_, _auth_password_, and _auth_token_ to
EditRepoOption
- updated the repository edit API to apply mirror auth changes via
_updateMirror_
- preserved existing username/password when only part of the auth
payload is provided
- used oauth2 as the default username when _auth_token_ is provided
- kept stored mirror URLs sanitized in DB and API responses
- updated Swagger schema for the new API fields
- added API integration tests for password-only and token-only updates
- added a web settings test to ensure username preservation on partial
updates
## Why
Some use cases require automated synchronization of pull mirrors, for
example in CI/CD pipelines or integrations with external systems.
At the same time, many organizations enforce security policies that
require periodic token rotation (e.g., monthly).
Currently, mirror credentials can only be updated via the UI, which
makes automation difficult.
## This change enables:
- automated token rotation
- avoiding manual updates via the UI
- easier integration with secret management systems
## Testing
- added integration coverage for mirror auth updates via _PATCH
/api/v1/repos/{owner}/{repo}_
- added web settings tests for password-only updates preserving the
existing username
## Result
Ability to automate auth update
<img width="2400" height="1245" alt="1"
src="https://github.com/user-attachments/assets/67fd5cca-9cb3-4536-b0e2-4d09b8ebff0f"
/>
<img width="962" height="932" alt="image"
src="https://github.com/user-attachments/assets/5d548f5d-aadf-4807-ba52-9c29df93a4cc"
/>
Generative AI was used to help with making this PR.
##
457 lines
20 KiB
Go
457 lines
20 KiB
Go
// Copyright 2014 The Gogs Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package structs
|
|
|
|
import (
|
|
"strings"
|
|
"time"
|
|
)
|
|
|
|
// ObjectFormatName is the git hash algorithm used by a repository.
|
|
// swagger:enum ObjectFormatName
|
|
type ObjectFormatName string
|
|
|
|
const (
|
|
ObjectFormatSHA1 ObjectFormatName = "sha1"
|
|
ObjectFormatSHA256 ObjectFormatName = "sha256"
|
|
)
|
|
|
|
// Permission represents a set of permissions
|
|
type Permission struct {
|
|
Admin bool `json:"admin"` // Admin indicates if the user is an administrator of the repository.
|
|
Push bool `json:"push"` // Push indicates if the user can push code to the repository.
|
|
Pull bool `json:"pull"` // Pull indicates if the user can pull code from the repository.
|
|
}
|
|
|
|
// InternalTracker represents settings for internal tracker
|
|
// swagger:model
|
|
type InternalTracker struct {
|
|
// Enable time tracking (Built-in issue tracker)
|
|
EnableTimeTracker bool `json:"enable_time_tracker"`
|
|
// Let only contributors track time (Built-in issue tracker)
|
|
AllowOnlyContributorsToTrackTime bool `json:"allow_only_contributors_to_track_time"`
|
|
// Enable dependencies for issues and pull requests (Built-in issue tracker)
|
|
EnableIssueDependencies bool `json:"enable_issue_dependencies"`
|
|
}
|
|
|
|
// ExternalTracker represents settings for external tracker
|
|
// swagger:model
|
|
type ExternalTracker struct {
|
|
// URL of external issue tracker.
|
|
ExternalTrackerURL string `json:"external_tracker_url"`
|
|
// External Issue Tracker URL Format. Use the placeholders {user}, {repo} and {index} for the username, repository name and issue index.
|
|
ExternalTrackerFormat string `json:"external_tracker_format"`
|
|
// External Issue Tracker Number Format, either `numeric`, `alphanumeric`, or `regexp`
|
|
ExternalTrackerStyle string `json:"external_tracker_style"`
|
|
// External Issue Tracker issue regular expression
|
|
ExternalTrackerRegexpPattern string `json:"external_tracker_regexp_pattern"`
|
|
}
|
|
|
|
// ExternalWiki represents setting for external wiki
|
|
// swagger:model
|
|
type ExternalWiki struct {
|
|
// URL of external wiki.
|
|
ExternalWikiURL string `json:"external_wiki_url"`
|
|
}
|
|
|
|
// Repository represents a repository
|
|
type Repository struct {
|
|
ID int64 `json:"id"`
|
|
Owner *User `json:"owner"`
|
|
Name string `json:"name"`
|
|
FullName string `json:"full_name"`
|
|
Description string `json:"description"`
|
|
Empty bool `json:"empty"`
|
|
Private bool `json:"private"`
|
|
Fork bool `json:"fork"`
|
|
Template bool `json:"template"`
|
|
// the original repository if this repository is a fork, otherwise null
|
|
Parent *Repository `json:"parent,omitempty"`
|
|
Mirror bool `json:"mirror"`
|
|
Size int `json:"size"`
|
|
Language string `json:"language"`
|
|
LanguagesURL string `json:"languages_url"`
|
|
HTMLURL string `json:"html_url"`
|
|
URL string `json:"url"`
|
|
Link string `json:"link"`
|
|
SSHURL string `json:"ssh_url"`
|
|
CloneURL string `json:"clone_url"`
|
|
OriginalURL string `json:"original_url"`
|
|
Website string `json:"website"`
|
|
Stars int `json:"stars_count"`
|
|
Forks int `json:"forks_count"`
|
|
Watchers int `json:"watchers_count"`
|
|
BranchCount int `json:"branch_count"`
|
|
OpenIssues int `json:"open_issues_count"`
|
|
OpenPulls int `json:"open_pr_counter"`
|
|
Releases int `json:"release_counter"`
|
|
DefaultBranch string `json:"default_branch"`
|
|
DefaultTargetBranch string `json:"default_target_branch,omitempty"`
|
|
Archived bool `json:"archived"`
|
|
// swagger:strfmt date-time
|
|
Created time.Time `json:"created_at"`
|
|
// swagger:strfmt date-time
|
|
Updated time.Time `json:"updated_at"`
|
|
ArchivedAt time.Time `json:"archived_at"`
|
|
Permissions *Permission `json:"permissions,omitempty"`
|
|
HasCode bool `json:"has_code"`
|
|
HasIssues bool `json:"has_issues"`
|
|
InternalTracker *InternalTracker `json:"internal_tracker,omitempty"`
|
|
ExternalTracker *ExternalTracker `json:"external_tracker,omitempty"`
|
|
HasWiki bool `json:"has_wiki"`
|
|
ExternalWiki *ExternalWiki `json:"external_wiki,omitempty"`
|
|
HasPullRequests bool `json:"has_pull_requests"`
|
|
HasProjects bool `json:"has_projects"`
|
|
ProjectsMode string `json:"projects_mode"`
|
|
HasReleases bool `json:"has_releases"`
|
|
HasPackages bool `json:"has_packages"`
|
|
HasActions bool `json:"has_actions"`
|
|
IgnoreWhitespaceConflicts bool `json:"ignore_whitespace_conflicts"`
|
|
AllowMerge bool `json:"allow_merge_commits"`
|
|
AllowRebase bool `json:"allow_rebase"`
|
|
AllowRebaseMerge bool `json:"allow_rebase_explicit"`
|
|
AllowSquash bool `json:"allow_squash_merge"`
|
|
AllowFastForwardOnly bool `json:"allow_fast_forward_only_merge"`
|
|
AllowRebaseUpdate bool `json:"allow_rebase_update"`
|
|
AllowManualMerge bool `json:"allow_manual_merge"`
|
|
AutodetectManualMerge bool `json:"autodetect_manual_merge"`
|
|
DefaultDeleteBranchAfterMerge bool `json:"default_delete_branch_after_merge"`
|
|
DefaultMergeStyle string `json:"default_merge_style"`
|
|
DefaultAllowMaintainerEdit bool `json:"default_allow_maintainer_edit"`
|
|
AvatarURL string `json:"avatar_url"`
|
|
Internal bool `json:"internal"`
|
|
MirrorInterval string `json:"mirror_interval"`
|
|
// ObjectFormatName of the underlying git repository
|
|
ObjectFormatName ObjectFormatName `json:"object_format_name"`
|
|
// swagger:strfmt date-time
|
|
MirrorUpdated time.Time `json:"mirror_updated"`
|
|
RepoTransfer *RepoTransfer `json:"repo_transfer,omitempty"`
|
|
Topics []string `json:"topics"`
|
|
Licenses []string `json:"licenses"`
|
|
}
|
|
|
|
// CreateRepoOption options when creating repository
|
|
// swagger:model
|
|
type CreateRepoOption struct {
|
|
// Name of the repository to create
|
|
//
|
|
// required: true
|
|
// unique: true
|
|
Name string `json:"name" binding:"Required;AlphaDashDot;MaxSize(100)"`
|
|
// Description of the repository to create
|
|
Description string `json:"description" binding:"MaxSize(2048)"`
|
|
// Whether the repository is private
|
|
Private bool `json:"private"`
|
|
// Label-Set to use
|
|
IssueLabels string `json:"issue_labels" binding:"MaxSize(255)"`
|
|
// Whether the repository should be auto-initialized?
|
|
AutoInit bool `json:"auto_init"`
|
|
// Whether the repository is template
|
|
Template bool `json:"template"`
|
|
// Gitignores to use
|
|
Gitignores string `json:"gitignores"`
|
|
// License to use
|
|
License string `json:"license" binding:"MaxSize(100)"`
|
|
// Readme of the repository to create
|
|
Readme string `json:"readme" binding:"MaxSize(255)"`
|
|
// DefaultBranch of the repository (used when initializes and in template)
|
|
DefaultBranch string `json:"default_branch" binding:"GitRefName;MaxSize(100)"`
|
|
// TrustModel of the repository
|
|
// enum: ["default","collaborator","committer","collaboratorcommitter"]
|
|
TrustModel string `json:"trust_model"`
|
|
// ObjectFormatName of the underlying git repository, empty string for default (sha1)
|
|
ObjectFormatName ObjectFormatName `json:"object_format_name" binding:"MaxSize(6)"`
|
|
}
|
|
|
|
// EditRepoOption options when editing a repository's properties
|
|
// swagger:model
|
|
type EditRepoOption struct {
|
|
// name of the repository
|
|
// unique: true
|
|
Name *string `json:"name,omitempty" binding:"OmitEmpty;AlphaDashDot;MaxSize(100);"`
|
|
// a short description of the repository.
|
|
Description *string `json:"description,omitempty" binding:"MaxSize(2048)"`
|
|
// a URL with more information about the repository.
|
|
Website *string `json:"website,omitempty" binding:"MaxSize(1024)"`
|
|
// either `true` to make the repository private or `false` to make it public.
|
|
// Note: you will get a 422 error if the organization restricts changing repository visibility to organization
|
|
// owners and a non-owner tries to change the value of private.
|
|
Private *bool `json:"private,omitempty"`
|
|
// either `true` to make this repository a template or `false` to make it a normal repository
|
|
Template *bool `json:"template,omitempty"`
|
|
// either `true` to enable code for this repository or `false` to disable it.
|
|
HasCode *bool `json:"has_code,omitempty"`
|
|
// either `true` to enable issues for this repository or `false` to disable them.
|
|
HasIssues *bool `json:"has_issues,omitempty"`
|
|
// set this structure to configure internal issue tracker
|
|
InternalTracker *InternalTracker `json:"internal_tracker,omitempty"`
|
|
// set this structure to use external issue tracker
|
|
ExternalTracker *ExternalTracker `json:"external_tracker,omitempty"`
|
|
// either `true` to enable the wiki for this repository or `false` to disable it.
|
|
HasWiki *bool `json:"has_wiki,omitempty"`
|
|
// set this structure to use external wiki instead of internal
|
|
ExternalWiki *ExternalWiki `json:"external_wiki,omitempty"`
|
|
// sets the default branch for this repository.
|
|
DefaultBranch *string `json:"default_branch,omitempty"`
|
|
// either `true` to allow pull requests, or `false` to prevent pull request.
|
|
HasPullRequests *bool `json:"has_pull_requests,omitempty"`
|
|
// either `true` to enable project unit, or `false` to disable them.
|
|
HasProjects *bool `json:"has_projects,omitempty"`
|
|
// `repo` to only allow repo-level projects, `owner` to only allow owner projects, `all` to allow both.
|
|
ProjectsMode *string `json:"projects_mode,omitempty" binding:"In(repo,owner,all)"`
|
|
// either `true` to enable releases unit, or `false` to disable them.
|
|
HasReleases *bool `json:"has_releases,omitempty"`
|
|
// either `true` to enable packages unit, or `false` to disable them.
|
|
HasPackages *bool `json:"has_packages,omitempty"`
|
|
// either `true` to enable actions unit, or `false` to disable them.
|
|
HasActions *bool `json:"has_actions,omitempty"`
|
|
// either `true` to ignore whitespace for conflicts, or `false` to not ignore whitespace.
|
|
IgnoreWhitespaceConflicts *bool `json:"ignore_whitespace_conflicts,omitempty"`
|
|
// either `true` to allow merging pull requests with a merge commit, or `false` to prevent merging pull requests with merge commits.
|
|
AllowMerge *bool `json:"allow_merge_commits,omitempty"`
|
|
// either `true` to allow rebase-merging pull requests, or `false` to prevent rebase-merging.
|
|
AllowRebase *bool `json:"allow_rebase,omitempty"`
|
|
// either `true` to allow rebase with explicit merge commits (--no-ff), or `false` to prevent rebase with explicit merge commits.
|
|
AllowRebaseMerge *bool `json:"allow_rebase_explicit,omitempty"`
|
|
// either `true` to allow squash-merging pull requests, or `false` to prevent squash-merging.
|
|
AllowSquash *bool `json:"allow_squash_merge,omitempty"`
|
|
// either `true` to allow fast-forward-only merging pull requests, or `false` to prevent fast-forward-only merging.
|
|
AllowFastForwardOnly *bool `json:"allow_fast_forward_only_merge,omitempty"`
|
|
// either `true` to allow mark pr as merged manually, or `false` to prevent it.
|
|
AllowManualMerge *bool `json:"allow_manual_merge,omitempty"`
|
|
// either `true` to enable AutodetectManualMerge, or `false` to prevent it. Note: In some special cases, misjudgments can occur.
|
|
AutodetectManualMerge *bool `json:"autodetect_manual_merge,omitempty"`
|
|
// either `true` to allow updating pull request branch by rebase, or `false` to prevent it.
|
|
AllowRebaseUpdate *bool `json:"allow_rebase_update,omitempty"`
|
|
// set to `true` to delete pr branch after merge by default
|
|
DefaultDeleteBranchAfterMerge *bool `json:"default_delete_branch_after_merge,omitempty"`
|
|
// set to a merge style to be used by this repository: "merge", "rebase", "rebase-merge", "squash", or "fast-forward-only".
|
|
DefaultMergeStyle *string `json:"default_merge_style,omitempty"`
|
|
// set to `true` to allow edits from maintainers by default
|
|
DefaultAllowMaintainerEdit *bool `json:"default_allow_maintainer_edit,omitempty"`
|
|
// set to `true` to archive this repository.
|
|
Archived *bool `json:"archived,omitempty"`
|
|
// set to a string like `8h30m0s` to set the mirror interval time
|
|
MirrorInterval *string `json:"mirror_interval,omitempty"`
|
|
// enable prune - remove obsolete remote-tracking references when mirroring
|
|
EnablePrune *bool `json:"enable_prune,omitempty"`
|
|
// authentication username for the remote repository (mirrors)
|
|
MirrorUsername *string `json:"mirror_username,omitempty"`
|
|
// authentication password for the remote repository (mirrors)
|
|
MirrorPassword *string `json:"mirror_password,omitempty"`
|
|
// authentication token for the remote repository (mirrors)
|
|
MirrorToken *string `json:"mirror_token,omitempty"`
|
|
}
|
|
|
|
// GenerateRepoOption options when creating a repository using a template
|
|
// swagger:model
|
|
type GenerateRepoOption struct {
|
|
// the organization's name or individual user's name who will own the new repository
|
|
//
|
|
// required: true
|
|
Owner string `json:"owner"`
|
|
// required: true
|
|
// unique: true
|
|
Name string `json:"name" binding:"Required;AlphaDashDot;MaxSize(100)"`
|
|
// Default branch of the new repository
|
|
DefaultBranch string `json:"default_branch"`
|
|
// Description of the repository to create
|
|
Description string `json:"description" binding:"MaxSize(2048)"`
|
|
// Whether the repository is private
|
|
Private bool `json:"private"`
|
|
// include git content of default branch in template repo
|
|
GitContent bool `json:"git_content"`
|
|
// include topics in template repo
|
|
Topics bool `json:"topics"`
|
|
// include git hooks in template repo
|
|
GitHooks bool `json:"git_hooks"`
|
|
// include webhooks in template repo
|
|
Webhooks bool `json:"webhooks"`
|
|
// include avatar of the template repo
|
|
Avatar bool `json:"avatar"`
|
|
// include labels in template repo
|
|
Labels bool `json:"labels"`
|
|
// include protected branches in template repo
|
|
ProtectedBranch bool `json:"protected_branch"`
|
|
}
|
|
|
|
// CreateBranchRepoOption options when creating a branch in a repository
|
|
// swagger:model
|
|
type CreateBranchRepoOption struct {
|
|
// Name of the branch to create
|
|
//
|
|
// required: true
|
|
// unique: true
|
|
BranchName string `json:"new_branch_name" binding:"Required;GitRefName;MaxSize(100)"`
|
|
|
|
// Deprecated: true
|
|
// Name of the old branch to create from
|
|
//
|
|
// unique: true
|
|
OldBranchName string `json:"old_branch_name" binding:"GitRefName;MaxSize(100)"`
|
|
|
|
// Name of the old branch/tag/commit to create from
|
|
//
|
|
// unique: true
|
|
OldRefName string `json:"old_ref_name" binding:"GitRefName;MaxSize(100)"`
|
|
}
|
|
|
|
// RenameBranchRepoOption options when renaming a branch in a repository
|
|
// swagger:model
|
|
type RenameBranchRepoOption struct {
|
|
// New branch name
|
|
//
|
|
// required: true
|
|
// unique: true
|
|
Name string `json:"name" binding:"Required;GitRefName;MaxSize(100)"`
|
|
}
|
|
|
|
// UpdateBranchRepoOption options when updating a branch reference in a repository
|
|
// swagger:model
|
|
type UpdateBranchRepoOption struct {
|
|
// New commit SHA (or any ref) the branch should point to
|
|
//
|
|
// required: true
|
|
NewCommitID string `json:"new_commit_id" binding:"Required"`
|
|
|
|
// Expected old commit SHA of the branch; if provided it must match the current tip
|
|
OldCommitID string `json:"old_commit_id"`
|
|
|
|
// Force update even if the change is not a fast-forward
|
|
Force bool `json:"force"`
|
|
}
|
|
|
|
// TransferRepoOption options when transfer a repository's ownership
|
|
// swagger:model
|
|
type TransferRepoOption struct {
|
|
// required: true
|
|
NewOwner string `json:"new_owner"`
|
|
// ID of the team or teams to add to the repository. Teams can only be added to organization-owned repositories.
|
|
TeamIDs *[]int64 `json:"team_ids"`
|
|
}
|
|
|
|
// GitServiceType represents a git service
|
|
type GitServiceType int
|
|
|
|
// enumerate all GitServiceType
|
|
const (
|
|
NotMigrated GitServiceType = iota // 0 not migrated from external sites
|
|
PlainGitService // 1 plain git service
|
|
GithubService // 2 github.com
|
|
GiteaService // 3 gitea service
|
|
GitlabService // 4 gitlab service
|
|
GogsService // 5 gogs service
|
|
OneDevService // 6 onedev service
|
|
GitBucketService // 7 gitbucket service
|
|
CodebaseService // 8 codebase service
|
|
CodeCommitService // 9 codecommit service
|
|
)
|
|
|
|
// Name represents the service type's name
|
|
// WARNING: the name has to be equal to that on goth's library
|
|
func (gt GitServiceType) Name() string {
|
|
return strings.ToLower(gt.Title())
|
|
}
|
|
|
|
// Title represents the service type's proper title
|
|
func (gt GitServiceType) Title() string {
|
|
switch gt {
|
|
case GithubService:
|
|
return "GitHub"
|
|
case GiteaService:
|
|
return "Gitea"
|
|
case GitlabService:
|
|
return "GitLab"
|
|
case GogsService:
|
|
return "Gogs"
|
|
case OneDevService:
|
|
return "OneDev"
|
|
case GitBucketService:
|
|
return "GitBucket"
|
|
case CodebaseService:
|
|
return "Codebase"
|
|
case CodeCommitService:
|
|
return "CodeCommit"
|
|
case PlainGitService:
|
|
return "Git"
|
|
}
|
|
return ""
|
|
}
|
|
|
|
// MigrateRepoOptions options for migrating repository's
|
|
// this is used to interact with api v1
|
|
type MigrateRepoOptions struct {
|
|
// required: true
|
|
CloneAddr string `json:"clone_addr" binding:"Required"`
|
|
// deprecated (only for backwards compatibility, use repo_owner instead)
|
|
RepoOwnerID int64 `json:"uid"`
|
|
// the organization's name or individual user's name who will own the migrated repository
|
|
RepoOwner string `json:"repo_owner"`
|
|
// required: true
|
|
RepoName string `json:"repo_name" binding:"Required;AlphaDashDot;MaxSize(100)"`
|
|
|
|
// enum: ["git","github","gitea","gitlab","gogs","onedev","gitbucket","codebase","codecommit"]
|
|
Service string `json:"service"`
|
|
AuthUsername string `json:"auth_username"`
|
|
AuthPassword string `json:"auth_password"`
|
|
AuthToken string `json:"auth_token"`
|
|
|
|
Mirror bool `json:"mirror"`
|
|
LFS bool `json:"lfs"`
|
|
LFSEndpoint string `json:"lfs_endpoint"`
|
|
Private bool `json:"private"`
|
|
Description string `json:"description" binding:"MaxSize(2048)"`
|
|
Wiki bool `json:"wiki"`
|
|
Milestones bool `json:"milestones"`
|
|
Labels bool `json:"labels"`
|
|
Issues bool `json:"issues"`
|
|
PullRequests bool `json:"pull_requests"`
|
|
Releases bool `json:"releases"`
|
|
MirrorInterval string `json:"mirror_interval"`
|
|
|
|
AWSAccessKeyID string `json:"aws_access_key_id"`
|
|
AWSSecretAccessKey string `json:"aws_secret_access_key"`
|
|
}
|
|
|
|
// TokenAuth represents whether a service type supports token-based auth
|
|
func (gt GitServiceType) TokenAuth() bool {
|
|
switch gt {
|
|
case GithubService, GiteaService, GitlabService:
|
|
return true
|
|
}
|
|
return false
|
|
}
|
|
|
|
// SupportedFullGitService represents all git services supported to migrate issues/labels/prs and etc.
|
|
// TODO: add to this list after new git service added
|
|
var SupportedFullGitService = []GitServiceType{
|
|
GithubService,
|
|
GitlabService,
|
|
GiteaService,
|
|
GogsService,
|
|
OneDevService,
|
|
GitBucketService,
|
|
CodebaseService,
|
|
CodeCommitService,
|
|
}
|
|
|
|
// RepoTransfer represents a pending repo transfer
|
|
type RepoTransfer struct {
|
|
Doer *User `json:"doer"`
|
|
Recipient *User `json:"recipient"`
|
|
Teams []*Team `json:"teams"`
|
|
}
|
|
|
|
// NewIssuePinsAllowed represents an API response that says if new Issue Pins are allowed
|
|
type NewIssuePinsAllowed struct {
|
|
Issues bool `json:"issues"`
|
|
PullRequests bool `json:"pull_requests"`
|
|
}
|
|
|
|
// UpdateRepoAvatarUserOption options when updating the repo avatar
|
|
type UpdateRepoAvatarOption struct {
|
|
// image must be base64 encoded
|
|
Image string `json:"image" binding:"Required"`
|
|
}
|