Gusted 06556abb6d fix: delay deleting authorization token (#6937) ... - 1ce33aa38d extended the LTA table with a purpose column so it could be extended to other tokens. However some are single-use tokens and should be deleted after use. - This did not result in a good UX for activating user as they needed to also fill in their passwords and in the case that the password was incorrect the token would no longer be usable. - This patch modifies the code to allow for a little delay before deleting authorization tokens to do additional verification such as the password check. This cannot be done before the authorization token check as that the authorization token determines who the user is. - Resolves forgejo/forgejo#6912 - Adjusted existing unit test. Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/6937 Reviewed-by: Otto <otto@codeberg.org> Co-authored-by: Gusted <postmaster@gusted.xyz> Co-committed-by: Gusted <postmaster@gusted.xyz>		2025-02-17 11:09:33 +00:00
..
api	feat: add pronoun privacy option (#6773)	2025-02-15 13:07:15 +00:00
common	feat: add pronoun privacy option (#6773)	2025-02-15 13:07:15 +00:00
install	[CHORE] Move to new sessioner library	2024-08-25 03:47:08 +02:00
private	[CHORE] Use forked binding library	2024-11-05 22:47:34 +01:00
utils	[PORT] drop utils.IsExternalURL (and expand IsRiskyRedirectURL tests) (#3167)	2024-04-15 13:03:08 +00:00
web	fix: delay deleting authorization token (#6937)	2025-02-17 11:09:33 +00:00
init.go	Revert "Open telemetry integration (#3972)"	2024-08-07 11:22:43 +02:00