mirror of
https://github.com/RayLabsHQ/gitea-mirror.git
synced 2026-08-12 19:41:43 +08:00
ARUNAVO RAY
66e3284898
Resolves #306. SSO sign-in via OIDC (Authentik / Keycloak / etc.) now links the SSO identity to an existing email/password admin instead of bouncing to /login with `?error=UNKNOWN`. Account-linking is gated on the operator-supplied **Domain** field — cross-domain claims from a compromised IdP are refused. Also bundles the deprecated `oidcProvider` → `@better-auth/oauth-provider` migration. **Operators using the OAuth-provider feature must rotate registered client secrets after upgrade** (legacy plaintext → hashed storage; see the 0012 migration notes). Verified end-to-end on the pr-307 image against a real Authentik instance: SSO login lands on the dashboard, `accounts` table gets both `credential` and `authentik` rows for the same user. See PR description for full details.
56 lines
780 B
Plaintext
56 lines
780 B
Plaintext
# build output
|
|
dist/
|
|
# generated types
|
|
.astro/
|
|
|
|
# dependencies
|
|
node_modules/
|
|
|
|
# logs
|
|
npm-debug.log*
|
|
yarn-debug.log*
|
|
yarn-error.log*
|
|
pnpm-debug.log*
|
|
|
|
|
|
# environment variables
|
|
.env
|
|
.env.production
|
|
|
|
# database files
|
|
data/gitea-mirror.db
|
|
|
|
# macOS-specific files
|
|
.DS_Store
|
|
|
|
# jetbrains setting folder
|
|
.idea/
|
|
|
|
# Custom CA certificates (exclude actual certs but keep README)
|
|
certs/*.crt
|
|
certs/*.pem
|
|
certs/*.cer
|
|
!certs/README.md
|
|
|
|
# Nix build artifacts
|
|
result
|
|
result-*
|
|
.direnv/
|
|
|
|
# E2E test artifacts
|
|
tests/e2e/test-results/
|
|
tests/e2e/playwright-report/
|
|
tests/e2e/.auth/
|
|
tests/e2e/e2e-storage-state.json
|
|
tests/e2e/.fake-github.pid
|
|
tests/e2e/.app.pid
|
|
tests/e2e/git-repos/
|
|
|
|
# Playwright
|
|
/test-results/
|
|
/playwright-report/
|
|
/blob-report/
|
|
/playwright/.cache/
|
|
/playwright/.auth/
|
|
.playwright-mcp/
|