2018-05-17 12:05:00 +08:00
|
|
|
// Copyright 2014 The Gogs Authors. All rights reserved.
|
|
|
|
// Copyright 2018 The Gitea Authors. All rights reserved.
|
|
|
|
// Use of this source code is governed by a MIT-style
|
|
|
|
// license that can be found in the LICENSE file.
|
|
|
|
|
2022-01-02 21:12:35 +08:00
|
|
|
package security
|
2018-05-17 12:05:00 +08:00
|
|
|
|
|
|
|
import (
|
2021-04-05 23:30:52 +08:00
|
|
|
"net/http"
|
|
|
|
|
2018-05-17 12:05:00 +08:00
|
|
|
"code.gitea.io/gitea/models"
|
2022-01-02 21:12:35 +08:00
|
|
|
"code.gitea.io/gitea/models/auth"
|
2021-11-17 17:58:31 +08:00
|
|
|
user_model "code.gitea.io/gitea/models/user"
|
2018-05-17 12:05:00 +08:00
|
|
|
"code.gitea.io/gitea/modules/base"
|
|
|
|
"code.gitea.io/gitea/modules/context"
|
|
|
|
"code.gitea.io/gitea/modules/setting"
|
2022-05-29 08:03:17 +08:00
|
|
|
"code.gitea.io/gitea/services/auth/source/oauth2"
|
2018-05-17 12:05:00 +08:00
|
|
|
)
|
|
|
|
|
|
|
|
const (
|
2022-01-02 21:12:35 +08:00
|
|
|
tplSettingsSecurity base.TplName = "user/settings/security/security"
|
|
|
|
tplSettingsTwofaEnroll base.TplName = "user/settings/security/twofa_enroll"
|
2018-05-17 12:05:00 +08:00
|
|
|
)
|
|
|
|
|
|
|
|
// Security render change user's password page and 2FA
|
|
|
|
func Security(ctx *context.Context) {
|
|
|
|
ctx.Data["Title"] = ctx.Tr("settings")
|
|
|
|
ctx.Data["PageIsSettingsSecurity"] = true
|
|
|
|
|
2021-08-11 08:31:13 +08:00
|
|
|
if ctx.FormString("openid.return_to") != "" {
|
2018-06-19 02:24:45 +08:00
|
|
|
settingsOpenIDVerify(ctx)
|
|
|
|
return
|
|
|
|
}
|
|
|
|
|
|
|
|
loadSecurityData(ctx)
|
|
|
|
|
2021-04-05 23:30:52 +08:00
|
|
|
ctx.HTML(http.StatusOK, tplSettingsSecurity)
|
2018-06-19 02:24:45 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
// DeleteAccountLink delete a single account link
|
|
|
|
func DeleteAccountLink(ctx *context.Context) {
|
2021-07-29 09:42:15 +08:00
|
|
|
id := ctx.FormInt64("id")
|
2019-02-07 14:51:23 +08:00
|
|
|
if id <= 0 {
|
|
|
|
ctx.Flash.Error("Account link id is not given")
|
2018-06-19 02:24:45 +08:00
|
|
|
} else {
|
2022-03-22 15:03:22 +08:00
|
|
|
if _, err := user_model.RemoveAccountLink(ctx.Doer, id); err != nil {
|
2019-02-07 14:51:23 +08:00
|
|
|
ctx.Flash.Error("RemoveAccountLink: " + err.Error())
|
|
|
|
} else {
|
|
|
|
ctx.Flash.Success(ctx.Tr("settings.remove_account_link_success"))
|
|
|
|
}
|
2018-06-19 02:24:45 +08:00
|
|
|
}
|
|
|
|
|
2021-04-05 23:30:52 +08:00
|
|
|
ctx.JSON(http.StatusOK, map[string]interface{}{
|
2018-06-19 02:24:45 +08:00
|
|
|
"redirect": setting.AppSubURL + "/user/settings/security",
|
|
|
|
})
|
|
|
|
}
|
|
|
|
|
|
|
|
func loadSecurityData(ctx *context.Context) {
|
2022-03-22 15:03:22 +08:00
|
|
|
enrolled, err := auth.HasTwoFactorByUID(ctx.Doer.ID)
|
2018-05-17 12:05:00 +08:00
|
|
|
if err != nil {
|
2021-11-09 06:47:19 +08:00
|
|
|
ctx.ServerError("SettingsTwoFactor", err)
|
|
|
|
return
|
2018-05-17 12:05:00 +08:00
|
|
|
}
|
2021-11-09 06:47:19 +08:00
|
|
|
ctx.Data["TOTPEnrolled"] = enrolled
|
|
|
|
|
2022-03-22 15:03:22 +08:00
|
|
|
credentials, err := auth.GetWebAuthnCredentialsByUID(ctx.Doer.ID)
|
2021-11-09 06:47:19 +08:00
|
|
|
if err != nil {
|
2022-01-14 23:03:31 +08:00
|
|
|
ctx.ServerError("GetWebAuthnCredentialsByUID", err)
|
2021-11-09 06:47:19 +08:00
|
|
|
return
|
2018-05-19 22:12:37 +08:00
|
|
|
}
|
2022-01-14 23:03:31 +08:00
|
|
|
ctx.Data["WebAuthnCredentials"] = credentials
|
2018-05-17 12:05:00 +08:00
|
|
|
|
2022-03-22 15:03:22 +08:00
|
|
|
tokens, err := models.ListAccessTokens(models.ListAccessTokensOptions{UserID: ctx.Doer.ID})
|
2018-05-17 12:05:00 +08:00
|
|
|
if err != nil {
|
|
|
|
ctx.ServerError("ListAccessTokens", err)
|
|
|
|
return
|
|
|
|
}
|
|
|
|
ctx.Data["Tokens"] = tokens
|
|
|
|
|
2022-03-22 15:03:22 +08:00
|
|
|
accountLinks, err := user_model.ListAccountLinks(ctx.Doer)
|
2018-05-17 12:05:00 +08:00
|
|
|
if err != nil {
|
|
|
|
ctx.ServerError("ListAccountLinks", err)
|
|
|
|
return
|
|
|
|
}
|
|
|
|
|
2022-01-02 21:12:35 +08:00
|
|
|
// map the provider display name with the AuthSource
|
|
|
|
sources := make(map[*auth.Source]string)
|
2018-05-17 12:05:00 +08:00
|
|
|
for _, externalAccount := range accountLinks {
|
2022-01-02 21:12:35 +08:00
|
|
|
if authSource, err := auth.GetSourceByID(externalAccount.LoginSourceID); err == nil {
|
2018-05-17 12:05:00 +08:00
|
|
|
var providerDisplayName string
|
2021-08-06 09:11:08 +08:00
|
|
|
|
|
|
|
type DisplayNamed interface {
|
|
|
|
DisplayName() string
|
|
|
|
}
|
|
|
|
|
|
|
|
type Named interface {
|
|
|
|
Name() string
|
|
|
|
}
|
|
|
|
|
2022-01-02 21:12:35 +08:00
|
|
|
if displayNamed, ok := authSource.Cfg.(DisplayNamed); ok {
|
2021-08-06 09:11:08 +08:00
|
|
|
providerDisplayName = displayNamed.DisplayName()
|
2022-01-02 21:12:35 +08:00
|
|
|
} else if named, ok := authSource.Cfg.(Named); ok {
|
2021-08-06 09:11:08 +08:00
|
|
|
providerDisplayName = named.Name()
|
2018-05-17 12:05:00 +08:00
|
|
|
} else {
|
2022-01-02 21:12:35 +08:00
|
|
|
providerDisplayName = authSource.Name
|
2018-05-17 12:05:00 +08:00
|
|
|
}
|
2022-01-02 21:12:35 +08:00
|
|
|
sources[authSource] = providerDisplayName
|
2018-05-17 12:05:00 +08:00
|
|
|
}
|
|
|
|
}
|
|
|
|
ctx.Data["AccountLinks"] = sources
|
|
|
|
|
2022-05-29 08:03:17 +08:00
|
|
|
orderedOAuth2Names, oauth2Providers, err := oauth2.GetActiveOAuth2Providers()
|
|
|
|
if err != nil {
|
|
|
|
ctx.ServerError("GetActiveOAuth2Providers", err)
|
|
|
|
return
|
|
|
|
}
|
|
|
|
ctx.Data["OrderedOAuth2Names"] = orderedOAuth2Names
|
|
|
|
ctx.Data["OAuth2Providers"] = oauth2Providers
|
|
|
|
|
2022-03-22 15:03:22 +08:00
|
|
|
openid, err := user_model.GetUserOpenIDs(ctx.Doer.ID)
|
2018-05-17 12:05:00 +08:00
|
|
|
if err != nil {
|
|
|
|
ctx.ServerError("GetUserOpenIDs", err)
|
|
|
|
return
|
|
|
|
}
|
|
|
|
ctx.Data["OpenIDs"] = openid
|
|
|
|
}
|