Migrated repository
Go to file
zeripath e0853d4a21
Add API Token Cache (#16547)
One of the issues holding back performance of the API is the problem of hashing.
Whilst banning BASIC authentication with passwords will help, the API Token scheme
still requires a PBKDF2 hash - which means that heavy API use (using Tokens) can
still cause enormous numbers of hash computations.

A slight solution to this whilst we consider moving to using JWT based tokens and/or
a session orientated solution is to simply cache the successful tokens. This has some
security issues but this should be balanced by the security issues of load from
hashing.

Related #14668

Signed-off-by: Andrew Thornton <art27@cantab.net>

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2021-08-17 14:30:42 -04:00
.github Update pull_request_template.md (#15948) 2021-05-22 10:46:33 -04:00
assets Clean up SVG (#13680) 2020-12-17 16:33:53 -05:00
build Update JS dependencies (#16708) 2021-08-17 01:32:48 -04:00
cmd Add agit flow support in gitea (#14295) 2021-07-28 17:42:56 +08:00
contrib Update bluemonday to v1.0.15 (#16379) 2021-07-09 03:30:31 +02:00
custom/conf Add API Token Cache (#16547) 2021-08-17 14:30:42 -04:00
docker Change docker tag logic (#16421) 2021-07-14 18:08:43 +01:00
docs Add API Token Cache (#16547) 2021-08-17 14:30:42 -04:00
integrations Add filter by owner and team to issue/pulls search endpoint (#16662) 2021-08-13 22:47:25 +02:00
models Add API Token Cache (#16547) 2021-08-17 14:30:42 -04:00
modules Add API Token Cache (#16547) 2021-08-17 14:30:42 -04:00
options [skip ci] Updated translations via Crowdin 2021-08-17 00:07:42 +00:00
public Update JS dependencies (#16708) 2021-08-17 01:32:48 -04:00
routers Fix spelling of HookProcReceiveResult (#16690) 2021-08-14 13:17:10 +02:00
services Use github token URL when fetching oauth token (#16709) 2021-08-17 09:07:52 +01:00
snap Removable media support (#16136) 2021-06-11 14:51:05 -04:00
templates Update JS dependencies (#16708) 2021-08-17 01:32:48 -04:00
tools Fix NPE in fuzzer (#16680) 2021-08-13 00:22:05 +02:00
vendor Upgrade levelqueue 0.4.1 (#16696) 2021-08-15 22:52:26 +02:00
web_src Update JS dependencies (#16708) 2021-08-17 01:32:48 -04:00
.air.conf Add 'watch-backend' (#12330) 2020-07-27 14:05:42 -04:00
.changelog.yml Changelog for v1.15.0-rc1 (#16422) 2021-07-15 11:47:57 -04:00
.drone.yml build with go1.17 (#16707) 2021-08-17 08:31:28 -04:00
.editorconfig add well-known config for OIDC (#15355) 2021-04-15 22:32:00 -04:00
.eslintrc Update JS dependencies (#16708) 2021-08-17 01:32:48 -04:00
.gitattributes Update JS dependencies and misc tweaks (#13741) 2020-11-29 16:39:36 -05:00
.gitignore Update JS dependencies, use Node 16 (#15804) 2021-05-13 11:12:36 -04:00
.golangci.yml Refactor routers directory (#15800) 2021-06-09 01:33:54 +02:00
.ignore Fonts rework (#12114) 2020-07-06 11:56:54 +03:00
.lgtm refactor: ignore LGTM from author of pull request. (#3283) 2018-01-02 06:13:49 -06:00
.npmrc Stop packaging node_modules in release tarballs (#15273) 2021-04-09 01:08:14 -04:00
.revive.toml refactor: replace lint to revive (#5422) 2018-12-03 09:28:46 -05:00
.stylelintrc Fix tooltips and issue dependency styles (#13458) 2020-11-10 20:28:07 +02:00
BSDmakefile Add BSDmakefile to prevent errors when make is called under FreeBSD (#4446) 2018-07-16 20:45:51 +02:00
build.go Use binary version of revive linter (#15739) 2021-05-09 13:08:02 +02:00
CHANGELOG.md Changelog for 1.15.0-rc3 (#16621) (#16645) 2021-08-07 20:27:49 +03:00
CONTRIBUTING.md [API] generalize list header (#16551) 2021-08-12 14:43:08 +02:00
DCO follow the advisor: add DCO and some improvements 2016-11-04 16:43:41 +08:00
Dockerfile build with go1.17 (#16707) 2021-08-17 08:31:28 -04:00
Dockerfile.rootless build with go1.17 (#16707) 2021-08-17 08:31:28 -04:00
go.mod Upgrade levelqueue 0.4.1 (#16696) 2021-08-15 22:52:26 +02:00
go.sum Upgrade levelqueue 0.4.1 (#16696) 2021-08-15 22:52:26 +02:00
jest.config.js Update JS dependencies (#16708) 2021-08-17 01:32:48 -04:00
LICENSE Fix typo 2016-11-08 08:42:05 +01:00
main.go Dump github/gitlab/gitea repository data to a local directory and restore to gitea (#12244) 2020-12-27 11:34:19 +08:00
MAINTAINERS Add jpraet to MAINTAINERS (#16274) 2021-06-27 18:35:31 +01:00
Makefile build with go1.17 (#16707) 2021-08-17 08:31:28 -04:00
package-lock.json Update JS dependencies (#16708) 2021-08-17 01:32:48 -04:00
package.json Update JS dependencies (#16708) 2021-08-17 01:32:48 -04:00
README_ZH.md microbadger is no more, rm from readme (#16440) 2021-07-15 13:08:20 -04:00
README.md microbadger is no more, rm from readme (#16440) 2021-07-15 13:08:20 -04:00
SECURITY.md Add security policy to repo (#12536) 2020-08-19 17:15:55 +01:00
webpack.config.js Update JS dependencies (#16708) 2021-08-17 01:32:48 -04:00

Gitea

Gitea - Git with a cup of tea

View the chinese version of this document

Purpose

The goal of this project is to make the easiest, fastest, and most painless way of setting up a self-hosted Git service. Using Go, this can be done with an independent binary distribution across all platforms which Go supports, including Linux, macOS, and Windows on x86, amd64, ARM and PowerPC architectures. Want to try it before doing anything else? Do it with the online demo! This project has been forked from Gogs since 2016.11 but changed a lot.

Building

From the root of the source tree, run:

TAGS="bindata" make build

or if sqlite support is required:

TAGS="bindata sqlite sqlite_unlock_notify" make build

The build target is split into two sub-targets:

  • make backend which requires Go 1.13 or greater.
  • make frontend which requires Node.js 12.17 or greater and Internet connectivity to download npm dependencies.

When building from the official source tarballs which include pre-built frontend files, the frontend target will not be triggered, making it possible to build without Node.js and Internet connectivity.

Parallelism (make -j <num>) is not supported.

More info: https://docs.gitea.io/en-us/install-from-source/

Using

./gitea web

NOTE: If you're interested in using our APIs, we have experimental support with documentation.

Contributing

Expected workflow is: Fork -> Patch -> Push -> Pull Request

NOTES:

  1. YOU MUST READ THE CONTRIBUTORS GUIDE BEFORE STARTING TO WORK ON A PULL REQUEST.
  2. If you have found a vulnerability in the project, please write privately to security@gitea.io. Thanks!

Translating

Translations are done through Crowdin. If you want to translate to a new language ask one of the managers in the Crowdin project to add a new language there.

You can also just create an issue for adding a language or ask on discord on the #translation channel. If you need context or find some translation issues, you can leave a comment on the string or ask on Discord. For general translation questions there is a section in the docs. Currently a bit empty but we hope fo fill it as questions pop up.

https://docs.gitea.io/en-us/translation-guidelines/

Crowdin

Further information

For more information and instructions about how to install Gitea, please look at our documentation. If you have questions that are not covered by the documentation, you can get in contact with us on our Discord server or create a post in the discourse forum.

We maintain a list of Gitea-related projects at gitea/awesome-gitea.
The hugo-based documentation theme is hosted at gitea/theme.
The official Gitea CLI is developed at gitea/tea.

Authors

Backers

Thank you to all our backers! 🙏 [Become a backer]

Sponsors

Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [Become a sponsor]

FAQ

How do you pronounce Gitea?

Gitea is pronounced /ɡɪti:/ as in "gi-tea" with a hard g.

Why is this not hosted on a Gitea instance?

We're working on it.

License

This project is licensed under the MIT License. See the LICENSE file for the full license text.

Screenshots

Looking for an overview of the interface? Check it out!

Dashboard User Profile Global Issues
Branches Web Editor Activity
New Migration Migrating Pull Request View
Pull Request Dark Diff Review Dark Diff Dark