Skip to content

Keys should not verify revoked email addresses (#12486)#12495

Merged
techknowlogick merged 2 commits into
go-gitea:release/v1.12from
zeripath:backport-12486
Aug 17, 2020
Merged

Keys should not verify revoked email addresses (#12486)#12495
techknowlogick merged 2 commits into
go-gitea:release/v1.12from
zeripath:backport-12486

Conversation

@zeripath
Copy link
Copy Markdown
Contributor

Backport #12486

Fix #6778

Signed-off-by: Andrew Thornton art27@cantab.net

Backport go-gitea#12486

Fix go-gitea#6778

Signed-off-by: Andrew Thornton <art27@cantab.net>
@zeripath zeripath added this to the 1.12.4 milestone Aug 16, 2020
@zeripath
Copy link
Copy Markdown
Contributor Author

It's worth noting that this will only result in non-verification if and only if the key does not match any other email address for the user.

(Remember that Signature Verification in Gitea does not currently match Github - Github's signature verification is only committer verification we have a slightly different model.)

@GiteaBot GiteaBot added the lgtm/need 2 This PR needs two approvals by maintainers to be considered for merging. label Aug 16, 2020
@GiteaBot GiteaBot added lgtm/need 1 This PR needs approval from one additional maintainer to be merged. and removed lgtm/need 2 This PR needs two approvals by maintainers to be considered for merging. labels Aug 16, 2020
@GiteaBot GiteaBot added lgtm/done This PR has enough approvals to get merged. There are no important open reservations anymore. and removed lgtm/need 1 This PR needs approval from one additional maintainer to be merged. labels Aug 17, 2020
@techknowlogick
Copy link
Copy Markdown
Member

🚀

@techknowlogick techknowlogick merged commit 8282697 into go-gitea:release/v1.12 Aug 17, 2020
@zeripath zeripath deleted the backport-12486 branch August 17, 2020 16:07
@go-gitea go-gitea locked and limited conversation to collaborators Nov 24, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

lgtm/done This PR has enough approvals to get merged. There are no important open reservations anymore. type/bug

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants