revert: tea 1.0 rewrite (#1122–#1126) (#1146)

Reverts #1126, #1125, #1124, #1123 and #1122. `go.mod` keeps the Go 1.26 line with toolchain `go1.26.9` (instead of the original `go1.26.6`) so the security fix from #1131 isn't lost. reopens #69 reopens #141 reopens #162 reopens #172 reopens #197 reopens #232 reopens #240 reopens #246 reopens #323 reopens #325 reopens #326 reopens #328 reopens #344 reopens #351 reopens #373 reopens #403 reopens #406 reopens #417 reopens #430 reopens #457 reopens #480 reopens #482 reopens #489 reopens #490 reopens #498 reopens #500 reopens #504 reopens #510 reopens #516 reopens #523 reopens #556 reopens #560 reopens #569 reopens #571 reopens #602 reopens #632 reopens #633 reopens #643 reopens #666 reopens #670 reopens #672 reopens #677 reopens #683 reopens #697 reopens #726 reopens #737 reopens #770 reopens #779 reopens #804 reopens #817 reopens #831 reopens #833 reopens #834 reopens #908 reopens #966 reopens #1023 reopens #1029 reopens #1032 reopens #1050 reopens #1052 reopens #1069 reopens #1073 reopens #1087 reopens #1091 reopens #1094 reopens #1110 reopens #1115 reopens #1116 reopens #1118 Reviewed-on: https://gitea.com/gitea/tea/pulls/1146 Reviewed-by: TheFox0x7 <95654+thefox0x7@noreply.gitea.com>
2026-10-26 11:01:25 +01:00 · 2026-10-18 20:56:33 +00:00
1 parent 33bb12729e
commit c5f674111a
@@ -0,0 +1,171 @@
+// Copyright 2020 The Gitea Authors. All rights reserved.
+// SPDX-License-Identifier: MIT
+
+package login
+
+import (
+	"context"
+	"fmt"
+
+	"gitea.dev/tea/modules/auth"
+	"gitea.dev/tea/modules/interact"
+	"gitea.dev/tea/modules/task"
+
+	"github.com/urfave/cli/v3"
+)
+
+// CmdLoginAdd represents to login a gitea server.
+var CmdLoginAdd = cli.Command{
+	Name:  "add",
+	Usage: "Add a Gitea login",
+	Description: `Add a Gitea login, without args it will create one interactively.
+
+By default tea only stores the token for its own API use. Pass --git-credentials
+to also register tea as a git credential helper for the login's URL, so that
+'git push' and 'git clone' over HTTPS authenticate silently using the stored
+token. Equivalent to running 'tea login helper setup' afterwards.`,
+	ArgsUsage: " ", // command does not accept arguments
+	Flags: []cli.Flag{
+		&cli.StringFlag{
+			Name:    "name",
+			Aliases: []string{"n"},
+			Usage:   "Login name",
+		},
+		&cli.StringFlag{
+			Name:    "url",
+			Aliases: []string{"u"},
+			Value:   "https://gitea.com",
+			Sources: cli.EnvVars("GITEA_SERVER_URL"),
+			Usage:   "Server URL",
+		},
+		&cli.BoolFlag{
+			Name:    "no-version-check",
+			Aliases: []string{"nv"},
+			Usage:   "Do not check version of Gitea instance",
+		},
+		&cli.StringFlag{
+			Name:    "token",
+			Aliases: []string{"t"},
+			Value:   "",
+			Sources: cli.EnvVars("GITEA_SERVER_TOKEN"),
+			Usage:   "Access token. Can be obtained from Settings > Applications",
+		},
+		&cli.StringFlag{
+			Name:    "user",
+			Value:   "",
+			Sources: cli.EnvVars("GITEA_SERVER_USER"),
+			Usage:   "User for basic auth (will create token)",
+		},
+		&cli.StringFlag{
+			Name:    "password",
+			Aliases: []string{"pwd"},
+			Value:   "",
+			Sources: cli.EnvVars("GITEA_SERVER_PASSWORD"),
+			Usage:   "Password for basic auth (will create token)",
+		},
+		&cli.StringFlag{
+			Name:    "otp",
+			Sources: cli.EnvVars("GITEA_SERVER_OTP"),
+			Usage:   "OTP token for auth, if necessary",
+		},
+		&cli.StringFlag{
+			Name:    "scopes",
+			Sources: cli.EnvVars("GITEA_SCOPES"),
+			Usage:   "Token scopes to add when creating a new token, separated by a comma",
+		},
+		&cli.StringFlag{
+			Name:    "ssh-key",
+			Aliases: []string{"s"},
+			Usage:   "Path to a SSH key/certificate to use, overrides auto-discovery",
+		},
+		&cli.BoolFlag{
+			Name:    "insecure",
+			Aliases: []string{"i"},
+			Usage:   "Disable TLS verification",
+		},
+		&cli.StringFlag{
+			Name:    "ssh-agent-principal",
+			Aliases: []string{"c"},
+			Usage:   "Use SSH certificate with specified principal to login (needs a running ssh-agent with certificate loaded)",
+		},
+		&cli.StringFlag{
+			Name:    "ssh-agent-key",
+			Aliases: []string{"a"},
+			Usage:   "Use SSH public key or SSH fingerprint to login (needs a running ssh-agent with ssh key loaded)",
+		},
+		&cli.BoolFlag{
+			Name:    "git-credentials",
+			Aliases: []string{"helper", "j"},
+			Usage:   "Register tea as a git credential helper for this login's URL, so 'git push' and 'git clone' over HTTPS authenticate silently using the stored token",
+		},
+		&cli.BoolFlag{
+			Name:    "oauth",
+			Aliases: []string{"o"},
+			Usage:   "Use interactive OAuth2 flow for authentication",
+		},
+		&cli.StringFlag{
+			Name:  "client-id",
+			Usage: "OAuth client ID (for use with --oauth)",
+		},
+		&cli.StringFlag{
+			Name:  "redirect-url",
+			Usage: "OAuth redirect URL (for use with --oauth)",
+		},
+	},
+	Action: runLoginAdd,
+}
+
+func runLoginAdd(requestCtx context.Context, cmd *cli.Command) error {
+	// if no args create login interactive
+	if cmd.NumFlags() == 0 {
+		if err := interact.CreateLogin(requestCtx); err != nil && !interact.IsQuitting(err) {
+			return fmt.Errorf("error adding login: %w", err)
+		}
+		return nil
+	}
+
+	// if OAuth flag is provided, use OAuth2 PKCE flow
+	if cmd.Bool("oauth") {
+		opts := auth.OAuthOptions{
+			Name:     cmd.String("name"),
+			URL:      cmd.String("url"),
+			Insecure: cmd.Bool("insecure"),
+		}
+
+		// Only set clientID if provided
+		if cmd.String("client-id") != "" {
+			opts.ClientID = cmd.String("client-id")
+		}
+
+		// Only set redirect URL if provided
+		if cmd.String("redirect-url") != "" {
+			opts.RedirectURL = cmd.String("redirect-url")
+		}
+
+		return auth.OAuthLoginWithFullOptions(requestCtx, opts)
+	}
+
+	sshAgent := false
+	if cmd.String("ssh-agent-key") != "" || cmd.String("ssh-agent-principal") != "" {
+		sshAgent = true
+	}
+
+	// else use args to add login
+	return task.CreateLogin(
+		requestCtx,
+		cmd.String("name"),
+		cmd.String("token"),
+		cmd.String("user"),
+		cmd.String("password"),
+		cmd.String("otp"),
+		cmd.String("scopes"),
+		cmd.String("ssh-key"),
+		cmd.String("url"),
+		cmd.String("ssh-agent-principal"),
+		cmd.String("ssh-agent-key"),
+		cmd.Bool("insecure"),
+		sshAgent,
+		!cmd.Bool("no-version-check"),
+		cmd.Bool("git-credentials"),
+	)
+}