forgejo/routers/api/v1
Gusted a9c97110f9 feat: add configurable cooldown to claim usernames (#6422)
Add a new option that allows instances to set a cooldown period to claim
old usernames. In the context of public instances this can be used to
prevent old usernames to be claimed after they are free and allow
graceful migration (by making use of the redirect feature) to a new
username. The granularity of this cooldown is a day. By default this
feature is disabled and thus no cooldown period.

The `CreatedUnix` column is added the `user_redirect` table, for
existing redirects the timestamp is simply zero as we simply do not know
when they were created and are likely already over the cooldown period
if the instance configures one.

Users can always reclaim their 'old' user name again within the cooldown
period. Users can also always reclaim 'old' names of organization they
currently own within the cooldown period.

Creating and renaming users as an admin user are not affected by the
cooldown period for moderation and user support reasons.

To avoid abuse of the cooldown feature, such that a user holds a lot of
usernames, a new option is added `MAX_USER_REDIRECTS` which sets a limit
to the amount of user redirects a user may have, by default this is
disabled. If a cooldown period is set then the default is 5. This
feature operates independently of the cooldown period feature.

Added integration and unit testing.

Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/6422
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Reviewed-by: 0ko <0ko@noreply.codeberg.org>
Reviewed-by: Otto <otto@codeberg.org>
Co-authored-by: Gusted <postmaster@gusted.xyz>
Co-committed-by: Gusted <postmaster@gusted.xyz>
2025-01-24 04:16:56 +00:00
..
activitypub [PORT] Remove SHA1 for support for ssh rsa signing (#31857) (#5303) 2025-01-17 03:17:10 +00:00
admin feat: add configurable cooldown to claim usernames (#6422) 2025-01-24 04:16:56 +00:00
misc fix: Preview picture not visible on Markdown file (#5781) 2024-11-23 15:00:18 +00:00
notify drop log.Error in ReadRepoNotifications 2024-03-24 07:12:31 +01:00
org Add search action jobs for API routes, repo, org and global level (#6300) 2025-01-14 11:17:42 +00:00
packages remove util.OptionalBool and related functions (#29513) 2024-03-06 12:10:46 +08:00
repo Add search action jobs for API routes, repo, org and global level (#6300) 2025-01-14 11:17:42 +00:00
settings Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
shared Add search action jobs for API routes, repo, org and global level (#6300) 2025-01-14 11:17:42 +00:00
swagger Implement update branch API (#32433) 2024-12-15 09:24:31 +01:00
user Add search action jobs for API routes, repo, org and global level (#6300) 2025-01-14 11:17:42 +00:00
utils Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
api.go fix: listing tokens must not require basic auth (#6633) 2025-01-21 07:58:16 +00:00