jojo/templates
0ko 1ef5496055 feat: use AppDomain for key verification (#10429)
Fixes #10416
Followup to a hardcoded string in [gitea#17743](https://github.com/go-gitea/gitea/pull/17743)

* instead of using a hardcoded namespace, use the configured application domain
    * `ssh-keygen` refuses to work with empty namespace, but `Domain` falls back to `localhost`:
    95dca7ff57/modules/setting/server.go (L192)
    * since `VerifySSHKey` verifies the namespace, I think that using a mostly-unique string instead of a hardcoded one doesn't hurt. Here's what `man ssh-keygen` says on the topic:
      > An additional signature namespace, used to prevent signature confusion across different domains of use (e.g. file signing vs email signing) must be provided  via  the  -n  flag.   Namespaces  are  arbitrary strings,  and  may  include:  “file”  for file signing, “email” for email signing.  For custom uses, it is recommended to use
names following a NAMESPACE@YOUR.DOMAIN pattern to generate unambiguous namespaces.

## Testing

There's a test `TestFromOpenSSH` but it uses a hardcoded default namespace `file`:
95dca7ff57/models/asymkey/ssh_key_test.go (L334)

Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/10429
Reviewed-by: Beowulf <beowulf@beocode.eu>
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
Co-authored-by: 0ko <0ko@noreply.codeberg.org>
Co-committed-by: 0ko <0ko@noreply.codeberg.org>
2025-12-17 17:01:14 +01:00
..
admin fix: 'More actions' (⋯) dropdown from moderation reports overview page (#10339) 2025-12-10 17:09:59 +01:00
api/packages/pypi Update templates/api/packages/pypi/simple.tmpl 2024-04-12 16:43:30 +00:00
base fix(ui): do not wrongly highlight devtest link in navbar menu (#10357) 2025-12-07 17:44:28 +01:00
custom [FEAT] Repository flags 2024-02-05 16:09:42 +01:00
devtest fix(ui/buttons): implement .disabled class (#10410) 2025-12-16 14:18:08 +01:00
explore fix(ui): use octicon-repo-forked in repo list (#10227) 2025-11-26 11:21:20 +01:00
htmx fix(ui): Make 'Clear milestone' work with HTMX (#8266) 2025-08-11 20:10:10 +02:00
mail fix: release email links (#9690) 2025-10-16 16:12:32 +02:00
moderation feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
org feat(ui): allow dropdown to contain not just items (#9951) 2025-11-05 05:00:15 +01:00
package feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
projects feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
repo chore(ui): cleanup reviews css, improve consistency (#10268) 2025-12-01 01:30:25 +01:00
shared feat(issue-search): support query syntax (#9109) 2025-11-19 16:05:42 +01:00
status fix(ui): remove extra helpers from statuspages (#9753) 2025-10-20 12:03:58 +02:00
swagger fix: correct token summary in swagger to specify the used user. (#10367) 2025-12-10 17:13:07 +01:00
user feat: use AppDomain for key verification (#10429) 2025-12-17 17:01:14 +01:00
webhook fix: less restrictive matrix room_id pattern (#10056) 2025-11-11 04:45:15 +01:00
home.tmpl Split Forgejo landing page template to allow patching or removing Forgejo introduction section (#6675) 2025-02-03 08:41:52 +00:00
home_forgejo.tmpl Split Forgejo landing page template to allow patching or removing Forgejo introduction section (#6675) 2025-02-03 08:41:52 +00:00
install.tmpl Added alt's to <img> 2025-01-31 21:22:00 +00:00
post-install.tmpl [BRANDING] Custom loading animation for Forgejo 2024-02-05 16:02:13 +01:00