63ab92d797
This PR is an extended implementation of #25189 and builds upon the proposal by @hickford in #25653, utilizing some ideas proposed internally by @wxiaoguang. Mainly, this PR consists of a mechanism to pre-register OAuth2 applications on startup, which can be enabled or disabled by modifying the `[oauth2].DEFAULT_APPLICATIONS` parameter in app.ini. The OAuth2 applications registered this way are being marked as "locked" and neither be deleted nor edited over UI to prevent confusing/unexpected behavior. Instead, they're being removed if no longer enabled in config.  The implemented mechanism can also be used to pre-register other OAuth2 applications in the future, if wanted. Co-authored-by: hickford <mirth.hickford@gmail.com> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com> --------- Co-authored-by: M Hickford <mirth.hickford@gmail.com> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
72 lines
2.7 KiB
Handlebars
72 lines
2.7 KiB
Handlebars
<div class="ui attached segment">
|
|
<div class="flex-list">
|
|
<div class="flex-item">
|
|
{{.locale.Tr "settings.oauth2_application_create_description"}}
|
|
</div>
|
|
{{range .Applications}}
|
|
<div class="flex-item flex-item-center">
|
|
<div class="flex-item-leading">
|
|
{{svg "octicon-apps" 32}}
|
|
</div>
|
|
<div class="flex-item-main">
|
|
<div class="flex-item-title">{{.Name}}</div>
|
|
<div class="flex-item-body">
|
|
{{$.locale.Tr "settings.oauth2_client_id"}}
|
|
<span class="ui label">{{.ClientID}}</span>
|
|
</div>
|
|
</div>
|
|
{{$isBuiltin := and $.BuiltinApplications (index $.BuiltinApplications .ClientID)}}
|
|
<div class="flex-item-trailing">
|
|
{{if $isBuiltin}}
|
|
<span class="ui basic label" data-tooltip-content="{{$.locale.Tr "settings.oauth2_application_locked"}}">{{ctx.Locale.Tr "locked"}}</span>
|
|
{{else}}
|
|
<a href="{{$.Link}}/oauth2/{{.ID}}" class="ui primary tiny button">
|
|
{{svg "octicon-pencil" 16 "gt-mr-2"}}
|
|
{{$.locale.Tr "settings.oauth2_application_edit"}}
|
|
</a>
|
|
<button class="ui red tiny button delete-button" data-modal-id="remove-gitea-oauth2-application"
|
|
data-url="{{$.Link}}/oauth2/{{.ID}}/delete">
|
|
{{svg "octicon-trash" 16 "gt-mr-2"}}
|
|
{{$.locale.Tr "settings.delete_key"}}
|
|
</button>
|
|
{{end}}
|
|
</div>
|
|
</div>
|
|
{{end}}
|
|
</div>
|
|
|
|
<div class="ui g-modal-confirm delete modal" id="remove-gitea-oauth2-application">
|
|
<div class="header">
|
|
{{svg "octicon-trash"}}
|
|
{{.locale.Tr "settings.remove_oauth2_application"}}
|
|
</div>
|
|
<div class="content">
|
|
<p>{{.locale.Tr "settings.oauth2_application_remove_description"}}</p>
|
|
</div>
|
|
{{template "base/modal_actions_confirm" .}}
|
|
</div>
|
|
</div>
|
|
|
|
<div class="ui attached bottom segment">
|
|
<h5 class="ui top header">
|
|
{{.locale.Tr "settings.create_oauth2_application"}}
|
|
</h5>
|
|
<form class="ui form ignore-dirty" action="{{.Link}}/oauth2" method="post">
|
|
{{.CsrfTokenHtml}}
|
|
<div class="field {{if .Err_AppName}}error{{end}}">
|
|
<label for="application-name">{{.locale.Tr "settings.oauth2_application_name"}}</label>
|
|
<input id="application-name" name="application_name" value="{{.application_name}}" required maxlength="255">
|
|
</div>
|
|
<div class="field {{if .Err_RedirectURI}}error{{end}}">
|
|
<label for="redirect-uris">{{.locale.Tr "settings.oauth2_redirect_uris"}}</label>
|
|
<textarea name="redirect_uris" id="redirect-uris"></textarea>
|
|
</div>
|
|
<div class="field ui checkbox {{if .Err_ConfidentialClient}}error{{end}}">
|
|
<label>{{.locale.Tr "settings.oauth2_confidential_client"}}</label>
|
|
<input type="checkbox" name="confidential_client" checked>
|
|
</div>
|
|
<button class="ui green button">
|
|
{{.locale.Tr "settings.create_oauth2_application_button"}}
|
|
</button>
|
|
</form>
|
|
</div>
|