forgejo/services/forms
Gusted 1c64bad453 fix: improve OAuth2 experience (#11715)
- fix: show oauth2 retrieve error
  - `true` indicates it only should be shown when the page is rendered
directly via `ctx.HTML` and not propagated if it redirects. As you can
see this always redirects and means the error is not shown.
  - Has the funny behavior that you get redirected to `/user/login`
without any indication what went wrong, no errors in the logs either.
- fix: pre-process OAuth2 client ID and secret
  - Spaces should are not appropriate for these input, remove them.
  - Manually copying and pasting client ID and secret from Github OAuth2
applications seems prone to introduce whitespaces.
  - The error of having a incorrect client ID is more noticeable (404 page
for the user).
  - The error of having a incorrect client secret is not noticeable (404
page for the goth library but no mention it's the wrong secret).

Reported-by: marijnh
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/11715
Reviewed-by: Mathieu Fenniak <mfenniak@noreply.codeberg.org>
Reviewed-by: Andreas Ahlenstorf <aahlenst@noreply.codeberg.org>
Co-authored-by: Gusted <postmaster@gusted.xyz>
Co-committed-by: Gusted <postmaster@gusted.xyz>
2026-03-17 18:44:23 +01:00
..
admin.go feat: Add support for administrators to set email visibility on user accounts (#9668) 2025-10-15 03:21:15 +02:00
auth_form.go fix: improve OAuth2 experience (#11715) 2026-03-17 18:44:23 +01:00
avatar.go fix: skip repo avatar upload when no file is selected (#11335) 2026-03-07 20:53:23 +01:00
org.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
package_form.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
repo_branch_form.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
repo_form.go feat: Drag and drop nested directories (#6687) 2025-10-03 00:16:40 +02:00
repo_form_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
repo_tag_form.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
report_abuse.go feat!: Abusive content reporting (#6977) 2025-05-18 08:05:16 +00:00
runner.go feat: add form-based runner management (#11516) 2026-03-12 02:14:45 +01:00
user_form.go chore: add email blocklist unit test 2025-08-30 09:45:19 +02:00
user_form_auth_openid.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
user_form_hidden_comments.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
user_form_test.go chore: add email blocklist unit test 2025-08-30 09:45:19 +02:00