Commit Graph

30 Commits

Author SHA1 Message Date
Matthew Knight 413f3e0015 Merge pull request 'Configure file upload size limit' (#57) from fix/upload-size-limit into main
Reviewed-on: https://git.ts.mattnite.net/mattnite/forgejo-tickets/pulls/57
2026-02-18 00:36:46 +00:00
Matthew Knight 3884124a3d Merge pull request 'Add logging for SSO user creation' (#56) from fix/sso-rate-logging into main
Reviewed-on: https://git.ts.mattnite.net/mattnite/forgejo-tickets/pulls/56
2026-02-18 00:35:54 +00:00
Matthew Knight 24f2522830 Merge pull request 'Remove dummy user_id from OAuth state sessions' (#55) from fix/oauth-state-session into main
Reviewed-on: https://git.ts.mattnite.net/mattnite/forgejo-tickets/pulls/55
2026-02-18 00:35:25 +00:00
Matthew Knight 731a928316 Merge pull request 'Disable static file directory listing' (#51) from fix/static-dir-listing into main
Reviewed-on: https://git.ts.mattnite.net/mattnite/forgejo-tickets/pulls/51
2026-02-18 00:28:19 +00:00
Matthew Knight dcea18bcac Merge pull request 'Add password complexity requirements' (#49) from fix/password-complexity into main
Reviewed-on: https://git.ts.mattnite.net/mattnite/forgejo-tickets/pulls/49
2026-02-18 00:26:40 +00:00
Matthew Knight dca569b278 Merge pull request 'Use session-based flash messages instead of query params' (#46) from fix/session-flash into main
Reviewed-on: https://git.ts.mattnite.net/mattnite/forgejo-tickets/pulls/46
2026-02-18 00:24:02 +00:00
Matthew Knight 8603b0bfb5
Use session-based flash messages instead of query params
Fixes #33

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 16:19:06 -08:00
Matthew Knight 9e4eef294a Merge pull request 'Add security response headers' (#45) from fix/security-headers into main
Reviewed-on: https://git.ts.mattnite.net/mattnite/forgejo-tickets/pulls/45
2026-02-18 00:17:41 +00:00
Matthew Knight ec94d94453 Merge pull request 'Sanitize Content-Disposition filename in downloads' (#43) from fix/content-disposition-injection into main
Reviewed-on: https://git.ts.mattnite.net/mattnite/forgejo-tickets/pulls/43
2026-02-18 00:14:50 +00:00
Matthew Knight cba9b5c408
Add password complexity requirements
Require at least one uppercase letter, one lowercase letter, and one
digit in addition to the existing 8-character minimum.

Fixes #31
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 16:14:01 -08:00
Matthew Knight f839444d3b
Disable static file directory listing
Fixes #28
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 16:12:47 -08:00
Matthew Knight c24f712cb6
Remove dummy user_id from OAuth state sessions
Use a simple signed cookie for OAuth state instead of PGStore,
which required a dummy user_id placeholder to satisfy the session
store's save logic.

Fixes #24
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 16:05:33 -08:00
Matthew Knight 1c0eb3be86
Configure file upload size limit
Fixes #23
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 16:04:35 -08:00
Matthew Knight b6c15e4d5c
Add logging for SSO user creation
Fixes #22
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 16:04:08 -08:00
Matthew Knight bcc912077d
Add security response headers
Fixes #18

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 16:00:56 -08:00
Matthew Knight ace0c06362
Sanitize Content-Disposition filename in downloads
Fixes #17

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 15:59:54 -08:00
Matthew Knight 9b2a812d95
Add rate limiting to authentication endpoints
Fixes #15

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 15:55:34 -08:00
Matthew Knight b187ee2257 Use customer names in UI and tickets 2026-02-16 23:08:29 +00:00
Matthew Knight f58f646b7d
Fix "customer" label not being assigned 2026-02-16 09:14:29 -08:00
Matthew Knight c7bdb3b66e
JWT SSO 2026-02-15 09:12:19 -08:00
Matthew Knight 02af677306
Fix attachments 2026-02-14 23:11:59 -08:00
Matthew Knight 7f1e554e40
Set label 2026-02-14 22:57:42 -08:00
Matthew Knight 210fa4ee2d
attachment fixes 2026-02-14 14:11:05 -08:00
Matthew Knight 0e52d7ef98
Render fixes 2026-02-14 13:33:19 -08:00
Matthew Knight d23aa87f75
More forgejo features 2026-02-14 12:59:32 -08:00
Matthew Knight 387810676b
customer label 2026-02-14 02:31:47 -08:00
Matthew Knight cb21e0f6a2
Forgejo as the source of truth 2026-02-14 02:04:27 -08:00
Matthew Knight 61e9f00b1c
Improvements 2026-02-14 00:19:49 -08:00
Matthew Knight c14cff4f51
Setting up webhooks 2026-02-13 23:05:42 -08:00
Matthew Knight 4fa62fc164
Init 2026-02-12 15:00:17 -08:00