Basavaraj S mandwxiaoguang 18d0ee174d fix(mailer): reject incoming email tokens of users who cannot sign in (#39833) ...

Incoming email reply tokens are embedded in every notification email and
stay valid for a year. `DecodeToken` verifies them with `user.Rands`,
which is not rotated when an admin disables sign-in or the account is
deactivated, and `ReplyHandler` only checks repo read permission. A
suspended user could therefore keep posting comments, review comments
and attachments on any public repo by replying to old notifications,
while the web, API, git and package paths all refuse them. `DecodeToken`
now rejects tokens of users who are inactive or prohibited from signing
in, which covers every incoming mail handler.

---------

Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

2026-10-18 10:20:00 +00:00

..

actions

enhance(actions): add OIDC workload identity support (#39052)

2026-10-18 07:08:55 +00:00

activities

fix(models): fix incorrect or unnecessary "scan rows" (#39516)

2026-10-12 16:00:54 +08:00

admin

refactor: Use db.Get[] instead of db.GetEngine(ctx).Get(bean) to avoid zero value fetching wrong database record (#37977)

2026-06-27 10:24:02 -07:00

asymkey

refactor: clarify GOOS detection (#39620)

2026-10-06 08:22:36 +00:00

audit

feat(user): allow renaming security keys (webauthn/passkey) (#39413)

2026-10-05 19:12:22 +02:00

auth

enhance(oauth): pre-register a builtin OAuth2 application for gitea-vscode (#39785)

2026-10-16 06:48:13 +00:00

avatars

fix(avatar): use sha256 and inline the federated avatar lookup (#38843)

2026-08-10 23:13:28 +00:00

db

refactor: migrate protected branch fields into one json column and support system users (#39735)

2026-10-13 00:40:21 +00:00

dbfs

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

deploykey

feat: add deploy tokens (#37306)

2026-08-26 19:32:44 +00:00

fixtures

feat: add deploy tokens (#37306)

2026-08-26 19:32:44 +00:00

git

feat(repo): allow deleting protected branches (#39243)

2026-10-14 07:19:49 +00:00

gituser

fix(ui): too many participants shown in commit avatar stacks (#38689)

2026-07-29 12:39:35 +00:00

issues

enhance: allow custom watches to bypass on-mention email restriction (#39652)

2026-10-18 09:23:12 +00:00

organization

feat(web): Add org removal functionality to admin user details page (#38013)

2026-08-29 07:50:04 +00:00

packages

fix(packages): list highest CRAN version in PACKAGES index (#39793)

2026-10-17 06:48:48 +00:00

perm

feat(actions): update actionslib, support self:, misc fixes (#39358)

2026-09-25 00:06:42 +02:00

project

fix(projects): allow max columns to the limit (#39272)

2026-09-10 22:32:46 +02:00

pull

fix: PR merge (#39442)

2026-09-26 17:38:42 +00:00

renderhelper

fix(markup): resolve and proxy srcset links of <source> elements (#39708)

2026-10-13 01:33:19 +00:00

repo

enhance: allow custom watches to bypass on-mention email restriction (#39652)

2026-10-18 09:23:12 +00:00

repostats

refactor: use WithRepo instead of WithDir for most git operations, clean up model migrations (#38555)

2026-07-21 12:18:00 +00:00

secret

refactor(actions): pass secret and variable scope as a struct (#39719)

2026-10-10 18:21:28 +00:00

shared/types

feat: manage bot accounts from the admin UI, API and CLI (#38966)

2026-09-18 12:43:36 +00:00

system

refactor: Use db.Get[] instead of db.GetEngine(ctx).Get(bean) to avoid zero value fetching wrong database record (#37977)

2026-06-27 10:24:02 -07:00

unit

enhance: inherit team access for all units (#38938)

2026-08-17 20:30:24 +00:00

unittest

refactor!: remove go-git backend (#39487)

2026-10-03 10:04:24 +00:00

user

fix(mailer): reject incoming email tokens of users who cannot sign in (#39833)

2026-10-18 10:20:00 +00:00

webhook

chore: misc go 1.27 tweaks (#39069)

2026-08-24 18:26:10 +00:00

init.go

refactor: use WithRepo instead of WithDir for most git operations, clean up model migrations (#38555)

2026-07-21 12:18:00 +00:00