aa1d95300a
As part of administration sometimes it is appropriate to forcibly tell users to update their passwords. This PR creates a new command `gitea admin user must-change-password` which will set the `MustChangePassword` flag on the provided users. Signed-off-by: Andrew Thornton <art27@cantab.net>
59 lines
1.4 KiB
Go
59 lines
1.4 KiB
Go
// Copyright 2023 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package cmd
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
|
|
user_model "code.gitea.io/gitea/models/user"
|
|
|
|
"github.com/urfave/cli"
|
|
)
|
|
|
|
var microcmdUserMustChangePassword = cli.Command{
|
|
Name: "must-change-password",
|
|
Usage: "Set the must change password flag for the provided users or all users",
|
|
Action: runMustChangePassword,
|
|
Flags: []cli.Flag{
|
|
cli.BoolFlag{
|
|
Name: "all,A",
|
|
Usage: "All users must change password, except those explicitly excluded with --exclude",
|
|
},
|
|
cli.StringSliceFlag{
|
|
Name: "exclude,e",
|
|
Usage: "Do not change the must-change-password flag for these users",
|
|
},
|
|
cli.BoolFlag{
|
|
Name: "unset",
|
|
Usage: "Instead of setting the must-change-password flag, unset it",
|
|
},
|
|
},
|
|
}
|
|
|
|
func runMustChangePassword(c *cli.Context) error {
|
|
ctx, cancel := installSignals()
|
|
defer cancel()
|
|
|
|
if c.NArg() == 0 && !c.IsSet("all") {
|
|
return errors.New("either usernames or --all must be provided")
|
|
}
|
|
|
|
mustChangePassword := !c.Bool("unset")
|
|
all := c.Bool("all")
|
|
exclude := c.StringSlice("exclude")
|
|
|
|
if err := initDB(ctx); err != nil {
|
|
return err
|
|
}
|
|
|
|
n, err := user_model.SetMustChangePassword(ctx, all, mustChangePassword, c.Args(), exclude)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
fmt.Printf("Updated %d users setting MustChangePassword to %t\n", n, mustChangePassword)
|
|
return nil
|
|
}
|