0
0
Fork 0
mirror of https://github.com/go-gitea/gitea synced 2024-12-25 23:24:51 +01:00
gitea/modules
zeripath 4979f15c3f
Add configurable Trust Models (#11712)
* Add configurable Trust Models

Gitea's default signature verification model differs from GitHub. GitHub
uses signatures to verify that the committer is who they say they are -
meaning that when GitHub makes a signed commit it must be the committer.
The GitHub model prevents re-publishing of commits after revocation of a
key and prevents re-signing of other people's commits to create a
completely trusted repository signed by one key or a set of trusted
keys.

The default behaviour of Gitea in contrast is to always display the
avatar and information related to a signature. This allows signatures to
be decoupled from the committer. That being said, allowing arbitary
users to present other peoples commits as theirs is not necessarily
desired therefore we have a trust model whereby signatures from
collaborators are marked trusted, signatures matching the commit line
are marked untrusted and signatures that match a user in the db but not
the committer line are marked unmatched.

The problem with this model is that this conflicts with Github therefore
we need to provide an option to allow users to choose the Github model
should they wish to.

Signed-off-by: Andrew Thornton <art27@cantab.net>

* Adjust locale strings

Signed-off-by: Andrew Thornton <art27@cantab.net>

* as per @6543

Co-authored-by: 6543 <6543@obermui.de>

* Update models/gpg_key.go

* Add migration for repository

Signed-off-by: Andrew Thornton <art27@cantab.net>

Co-authored-by: 6543 <6543@obermui.de>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2020-09-20 00:44:55 +08:00
..
analyze
auth Add configurable Trust Models (#11712) 2020-09-20 00:44:55 +08:00
avatar
base Use a simple format for the big number on ui (#12822) 2020-09-16 00:07:18 -04:00
cache
charset
context Add configurable Trust Models (#11712) 2020-09-20 00:44:55 +08:00
convert Refactor: move Commit To APIFormat Code & Lot of StopWatch related things (#12729) 2020-09-18 20:09:26 +08:00
cron
emoji
eventsource
generate
git Add configurable Trust Models (#11712) 2020-09-20 00:44:55 +08:00
gitgraph
graceful
highlight
httplib
indexer fix: use Base36 for all code indexers (#12830) 2020-09-14 13:40:07 +03:00
lfs
log
markup Fix markdown meta parsing (#12817) 2020-09-12 21:48:47 -04:00
metrics
migrations Fix anonymous GL migration (#12862) 2020-09-15 15:32:14 -04:00
notification Fix panic when adding long comment (#12892) 2020-09-18 13:50:06 -04:00
options
password Check passwords against HaveIBeenPwned (#12716) 2020-09-08 17:06:39 -05:00
pprof
private
process
public
queue
recaptcha
references
repofiles Add configurable Trust Models (#11712) 2020-09-20 00:44:55 +08:00
repository Add configurable Trust Models (#11712) 2020-09-20 00:44:55 +08:00
secret
session
setting Add configurable Trust Models (#11712) 2020-09-20 00:44:55 +08:00
ssh
storage
structs Add configurable Trust Models (#11712) 2020-09-20 00:44:55 +08:00
svg
sync
task [API] Migration: Change ServiceType String (#12672) 2020-09-10 23:29:19 +01:00
templates Use a simple format for the big number on ui (#12822) 2020-09-16 00:07:18 -04:00
test
timeutil
upload
user
util
validation
webhook