mirror of
https://gitea.com/gitea/tea.git
synced 2026-05-15 20:29:22 +02:00
22ff601988
## Summary Adds admin user management commands to the tea CLI, enabling admins to create, edit, and delete user accounts. ## Features Added ### Admin User Management Commands - **Create users**: `tea admin users create` - Create new user accounts with configurable options - **Edit users**: `tea admin users edit <username>` - Update user properties including password, permissions, and profile settings - **Delete users**: `tea admin users delete <username>` - Remove user accounts with confirmation prompt ### Implementation Details #### Create Command (`admin users create`) - Required: username - Optional: email, full name, password - Flags: admin, restricted, prohibit-login, visibility - Password input: command-line flag, file, stdin, or interactive prompt with confirmation - Default: users must change password on first login (use `--no-must-change-password` to skip) - Post-creation updates for admin/restricted/prohibit-login (not available during creation) #### Edit Command (`admin users edit`) - Updates only explicitly provided fields (partial updates) - Password change support with the same input methods as create - Editable fields: - Profile: email, full name, description, website, location - Permissions: admin/restricted/active status - Settings: visibility, max repo creation limits - Advanced: git hooks, local imports, organization creation - Default: password changes require password change on next login (use `--no-must-change-password` to skip) #### Delete Command (`admin users delete`) - Confirmation prompt by default - `--confirm` flag to skip confirmation - Displays user details before deletion ### Security Features - Secure password input via interactive prompts (hidden input) - Multiple password input methods: flag, file, stdin, interactive - Password confirmation for interactive mode - Whitespace trimming for file/stdin inputs ### Password Input Methods 1. **Command-line flag**: `--password <value>` 2. **File input**: `--password-file <file>` - Read from file 3. **Stdin input**: `--password-stdin` - Read from stdin 4. **Interactive prompt**: Automatically prompts if password not provided (with confirmation) For edit command: Use `--password=""` to trigger interactive prompt. ## Usage Examples ```bash # Create a new user tea admin users create --username john --email john@example.com --admin --no-must-change-password # Create with interactive password prompt tea admin users create jane --email jane@example.com # Edit user properties tea admin users edit john --email newemail@example.com --restricted # Change user password (will prompt if not provided) tea admin users edit john --password="" tea admin users edit john --password-file /path/to/password.txt # Delete a user (with confirmation) tea admin users delete olduser # Delete without confirmation tea admin users delete olduser --confirm ``` ## Related Issue Resolves #161 ## Testing - Unit tests for all commands - Flag validation and default value tests - Password input method tests (file, stdin, interactive) - Test coverage for all user option structures - Confirmation logic tests for delete command ## Technical Details - Uses Gitea SDK `AdminCreateUser`, `AdminEditUser`, and `AdminDeleteUser` APIs - Follows existing tea CLI patterns and conventions - Handles fields not available during creation via post-creation updates - Partial update support for edit command (only updates explicitly set fields) - Consistent with other tea commands (webhooks, secrets) in password handling and confirmation patterns All tests pass and the implementation integrates with existing tea CLI infrastructure. --------- Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> Reviewed-on: https://gitea.com/gitea/tea/pulls/842 Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: ghainer <gehainer@gmail.com> Co-committed-by: ghainer <gehainer@gmail.com>
63 lines
1.4 KiB
Go
63 lines
1.4 KiB
Go
// Copyright 2021 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package cmd
|
|
|
|
import (
|
|
stdctx "context"
|
|
|
|
"code.gitea.io/tea/cmd/admin/users"
|
|
"code.gitea.io/tea/modules/context"
|
|
"code.gitea.io/tea/modules/print"
|
|
"github.com/urfave/cli/v3"
|
|
)
|
|
|
|
// CmdAdmin represents the namespace of admin commands.
|
|
// The command itself has no functionality, but hosts subcommands.
|
|
var CmdAdmin = cli.Command{
|
|
Name: "admin",
|
|
Usage: "Operations requiring admin access on the Gitea instance",
|
|
Aliases: []string{"a"},
|
|
Category: catMisc,
|
|
Action: func(_ stdctx.Context, cmd *cli.Command) error {
|
|
return cli.ShowSubcommandHelp(cmd)
|
|
},
|
|
Commands: []*cli.Command{
|
|
&cmdAdminUsers,
|
|
},
|
|
}
|
|
|
|
var cmdAdminUsers = cli.Command{
|
|
Name: "users",
|
|
Aliases: []string{"u"},
|
|
Usage: "Manage registered users",
|
|
Action: func(ctx stdctx.Context, cmd *cli.Command) error {
|
|
if cmd.Args().Len() == 1 {
|
|
return runAdminUserDetail(ctx, cmd, cmd.Args().First())
|
|
}
|
|
return users.RunUserList(ctx, cmd)
|
|
},
|
|
Commands: []*cli.Command{
|
|
&users.CmdUserList,
|
|
&users.CmdUserCreate,
|
|
&users.CmdUserEdit,
|
|
&users.CmdUserDelete,
|
|
},
|
|
Flags: users.CmdUserList.Flags,
|
|
}
|
|
|
|
func runAdminUserDetail(_ stdctx.Context, cmd *cli.Command, u string) error {
|
|
ctx, err := context.InitCommand(cmd)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
client := ctx.Login.Client()
|
|
user, _, err := client.GetUserInfo(u)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
print.UserDetails(user)
|
|
return nil
|
|
}
|