mirror of
https://github.com/go-gitea/gitea.git
synced 2026-09-20 19:53:41 +09:00
Adds first-class bot accounts (`UserTypeBot`): local, password-less
users for automation that authenticate only with access tokens.
1. Admin UI: create bots, filter users by type, manage a bot's access
tokens, convert between user and bot
2. API: `POST /admin/users/{username}/convert-type`, and user objects
gain a GitHub-compatible `type` (`User`, `Organization`, `Bot`)
3. CLI: `gitea admin user change-type`, `--user-type` accepts `User` or
`Bot` case-insensitively
4. Converting keeps the password, 2FA, OAuth2 grants and access tokens,
and since sign-in rejects bots, converting back restores the account.
Only local, non-admin accounts can be converted, and conversions are
audited
5. Session, reverse proxy, SSPI, external source and password reset
sign-in reject non-individual users, so a bot never gets an interactive
session
6. Bots receive no notifications or emails
Co-authored-by: Nicolas <bircni@icloud.com>
Co-authored-by: joestump <joe@joestump.net>
Co-authored-by: Joe Stump <joe@stu.mp>
Co-authored-by: silverwind <me@silverwind.io>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
101 lines
5.1 KiB
Handlebars
101 lines
5.1 KiB
Handlebars
{{template "admin/layout_head" (dict "pageClass" "admin new user")}}
|
|
<div class="admin-setting-content">
|
|
<h4 class="ui top attached header">
|
|
{{ctx.Locale.Tr "admin.users.new_account"}}
|
|
</h4>
|
|
<div class="ui attached segment">
|
|
<form class="ui form" action="{{.Link}}" method="post">
|
|
{{template "base/disable_form_autofill"}}
|
|
<div class="required field {{if .Err_UserName}}error{{end}}">
|
|
<label for="user_name">{{ctx.Locale.Tr "username"}}</label>
|
|
<input id="user_name" type="text" name="user_name" value="{{.user_name}}" autofocus required maxlength="40">
|
|
</div>
|
|
<div class="required field">
|
|
<label for="user_type">{{ctx.Locale.Tr "admin.users.user_type"}}</label>
|
|
<div class="ui selection type dropdown">
|
|
<input type="hidden" id="user_type" name="user_type" value="{{.user_type}}" required>
|
|
<div class="text">{{ctx.Locale.Tr "concept_user_user"}}</div>
|
|
{{svg "octicon-triangle-down" 14 "dropdown icon"}}
|
|
<div class="menu">
|
|
<div class="item" data-value="User">{{ctx.Locale.Tr "concept_user_user"}}</div>
|
|
<div class="item" data-value="Bot">{{ctx.Locale.Tr "concept_user_bot"}}</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div class="required field js-non-bot {{if .Err_LoginType}}error{{end}}">
|
|
<label for="login_type">{{ctx.Locale.Tr "admin.users.auth_source"}}</label>
|
|
<div class="ui selection type dropdown">
|
|
<input type="hidden" id="login_type" name="login_type" value="{{.login_type}}" required>
|
|
<div class="text">{{ctx.Locale.Tr "admin.users.local"}}</div>
|
|
{{svg "octicon-triangle-down" 14 "dropdown icon"}}
|
|
<div class="menu">
|
|
<div class="item" data-value="0-0">{{ctx.Locale.Tr "admin.users.local"}}</div>
|
|
{{range .Sources}}
|
|
<div class="item" data-value="{{.Type.Int}}-{{.ID}}">{{.Name}}</div>
|
|
{{end}}
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="required field {{if .Err_Visibility}}error{{end}}">
|
|
<label for="visibility">{{ctx.Locale.Tr "settings.visibility"}}</label>
|
|
<div class="ui selection type dropdown">
|
|
<input type="hidden" id="visibility" name="visibility" value="{{if .visibility}}{{printf "%d" .visibility}}{{else}}{{printf "%d" .DefaultUserVisibilityMode}}{{end}}">
|
|
<div class="text">
|
|
{{if .DefaultUserVisibilityMode.IsPublic}}{{ctx.Locale.Tr "settings.visibility.public"}}{{end}}
|
|
{{if .DefaultUserVisibilityMode.IsLimited}}{{ctx.Locale.Tr "settings.visibility.limited"}}{{end}}
|
|
{{if .DefaultUserVisibilityMode.IsPrivate}}{{ctx.Locale.Tr "settings.visibility.private"}}{{end}}
|
|
</div>
|
|
{{svg "octicon-triangle-down" 14 "dropdown icon"}}
|
|
<div class="menu">
|
|
{{range $mode := .AllowedUserVisibilityModes}}
|
|
{{if $mode.IsPublic}}
|
|
<div class="item" data-tooltip-content="{{ctx.Locale.Tr "settings.visibility.public_tooltip"}}" data-value="0">{{ctx.Locale.Tr "settings.visibility.public"}}</div>
|
|
{{else if $mode.IsLimited}}
|
|
<div class="item" data-tooltip-content="{{ctx.Locale.Tr "settings.visibility.limited_tooltip"}}" data-value="1">{{ctx.Locale.Tr "settings.visibility.limited"}}</div>
|
|
{{else if $mode.IsPrivate}}
|
|
<div class="item" data-tooltip-content="{{ctx.Locale.Tr "settings.visibility.private_tooltip"}}" data-value="2">{{ctx.Locale.Tr "settings.visibility.private"}}</div>
|
|
{{end}}
|
|
{{end}}
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="required js-non-local js-non-bot field {{if .Err_LoginName}}error{{end}} {{if eq .login_type "0-0"}}tw-hidden{{end}}">
|
|
<label for="login_name">{{ctx.Locale.Tr "admin.users.auth_login_name"}}</label>
|
|
<input id="login_name" name="login_name" value="{{.login_name}}">
|
|
</div>
|
|
<div class="required field {{if .Err_Email}}error{{end}}">
|
|
<label for="email">{{ctx.Locale.Tr "email"}}</label>
|
|
<input id="email" name="email" type="email" value="{{.email}}" required>
|
|
</div>
|
|
<div class="required js-local js-non-bot field {{if .Err_Password}}error{{end}} {{if not (eq .login_type "0-0")}}tw-hidden{{end}}">
|
|
<label for="password">{{ctx.Locale.Tr "password"}}</label>
|
|
<input id="password" name="password" type="password" autocomplete="new-password" value="{{.password}}" {{if eq .login_type "0-0"}}required{{end}}>
|
|
</div>
|
|
|
|
<div class="inline field js-local js-non-bot {{if ne .login_type "0-0"}}tw-hidden{{end}}">
|
|
<div class="ui checkbox">
|
|
<label><strong>{{ctx.Locale.Tr "auth.allow_password_change"}}</strong></label>
|
|
<input name="must_change_password" type="checkbox" checked>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Send register notify e-mail -->
|
|
{{if .CanSendEmail}}
|
|
<div class="inline js-non-bot field">
|
|
<div class="ui checkbox">
|
|
<label><strong>{{ctx.Locale.Tr "admin.users.send_register_notify"}}</strong></label>
|
|
<input name="send_notify" type="checkbox" {{if .send_notify}}checked{{end}}>
|
|
</div>
|
|
</div>
|
|
{{end}}
|
|
|
|
<div class="field">
|
|
<button type="submit" class="ui primary button">{{ctx.Locale.Tr "admin.users.new_account"}}</button>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
{{template "admin/layout_footer" .}}
|