mirror of
https://github.com/hanzoai/forge.git
synced 2026-10-30 15:00:39 +00:00
zeekayandHanzo Dev
76aaa4ded8
Audited against the live site, not just the source. git.hanzo.ai renders a clean DOM already, so what was left was the surface that source greps miss and live headers show. The one leak visibly served on every request: set-cookie: gitea_incredible= The remember-me cookie default was never rebranded. Renamed to hanzo_git_remember; existing remember-me sessions are invalidated once. The container was branding the site title upstream. Both entrypoints wrote APP_NAME="Gitea: Git with a cup of tea" into app.ini, overriding the already-correct Go default. Removed the shell default entirely so the value lives in exactly one place, setting.AppName; ini MustString fills an empty key with the default. Half-finished earlier passes, now finished: the iframe query params were already hanzo-*, but the postMessage payload keys and the window global were not; the settings page told users to sign with "-n gitea" while the verifier is the only thing that has to agree with it, so the namespace is now one exported constant rendered into the command. Also: local storage prefix, the fetch-action request header (made vendor-free per our header convention, both ends are ours), install-form database prefill, and the shipped example config, which additionally documented $GITEA_WORK_DIR and $GITEA_CUSTOM -- env vars this fork renamed to GIT_* long ago -- and a COOKIE_USERNAME key the code no longer reads. Deleted docker/manifest*.tmpl: dead Drone-era templates publishing to gitea/gitea on Docker Hub, referenced by nothing. Our docker dry-run was also pulling build cache from ghcr.io/go-gitea/gitea. Deliberately left, with reasons: - "The Gitea Authors" copyright headers (2938) and upstream PR/issue links (278). Attribution and provenance; removing them would be wrong. - /data/gitea on-disk layout. Renaming it is a data migration that orphans every existing install's db, sessions, avatars and attachments. - The "gitea" webhook type and migration source. Wire and DB values, and the migration source correctly names a third party we import from, the same way github and gitlab do. Display name already reads Hanzo Git. - X-Gitea-OTP, X-Gitea-Object-Type and the X-Gitea-* webhook delivery headers. External client contracts on a live host; renaming them belongs in its own change, not a branding sweep. - gitea-azuread__a and sodipodi:docname in web_src/svg. Verified these never reach the DOM: svgo cleanupIds rewrites the ids and removeEditorsNSData strips the editor metadata before the asset is written. Co-authored-by: Hanzo Dev <[email protected]>
103 lines
3.6 KiB
TypeScript
103 lines
3.6 KiB
TypeScript
import {hideElem, showElem} from '../utils/dom.ts';
|
|
import {GET} from '../modules/fetch.ts';
|
|
|
|
export function initInstall() {
|
|
const page = document.querySelector('.page-content.install');
|
|
if (!page) {
|
|
return;
|
|
}
|
|
if (page.classList.contains('post-install')) {
|
|
initPostInstall();
|
|
} else {
|
|
initPreInstall();
|
|
}
|
|
}
|
|
|
|
function initPreInstall() {
|
|
const defaultDbUser = 'hanzo_git';
|
|
const defaultDbName = 'hanzo_git';
|
|
|
|
const defaultDbHosts: Record<string, string> = {
|
|
mysql: '127.0.0.1:3306',
|
|
postgres: '127.0.0.1:5432',
|
|
mssql: '127.0.0.1:1433',
|
|
};
|
|
|
|
const dbHost = document.querySelector<HTMLInputElement>('#db_host')!;
|
|
const dbUser = document.querySelector<HTMLInputElement>('#db_user')!;
|
|
const dbName = document.querySelector<HTMLInputElement>('#db_name')!;
|
|
|
|
// Database type change detection.
|
|
document.querySelector<HTMLInputElement>('#db_type')!.addEventListener('change', function () {
|
|
const dbType = this.value;
|
|
hideElem('div[data-db-setting-for]');
|
|
showElem(`div[data-db-setting-for=${dbType}]`);
|
|
|
|
if (dbType !== 'sqlite3') {
|
|
// for most remote database servers
|
|
showElem('div[data-db-setting-for=common-host]');
|
|
const lastDbHost = dbHost.value;
|
|
const isDbHostDefault = !lastDbHost || Object.values(defaultDbHosts).includes(lastDbHost);
|
|
if (isDbHostDefault) {
|
|
dbHost.value = defaultDbHosts[dbType] ?? '';
|
|
}
|
|
if (!dbUser.value && !dbName.value) {
|
|
dbUser.value = defaultDbUser;
|
|
dbName.value = defaultDbName;
|
|
}
|
|
} // else: for SQLite3, the default path is always prepared by backend code (setting)
|
|
});
|
|
document.querySelector('#db_type')!.dispatchEvent(new Event('change'));
|
|
|
|
const appUrl = document.querySelector<HTMLInputElement>('#app_url')!;
|
|
if (appUrl.value.includes('://localhost')) {
|
|
appUrl.value = window.location.href;
|
|
}
|
|
|
|
const domain = document.querySelector<HTMLInputElement>('#domain')!;
|
|
if (domain.value.trim() === 'localhost') {
|
|
domain.value = window.location.hostname;
|
|
}
|
|
|
|
// TODO: better handling of exclusive relations.
|
|
document.querySelector<HTMLInputElement>('#enable-openid-signin input')!.addEventListener('change', function () {
|
|
if (this.checked) {
|
|
if (!document.querySelector<HTMLInputElement>('#disable-registration input')!.checked) {
|
|
document.querySelector<HTMLInputElement>('#enable-openid-signup input')!.checked = true;
|
|
}
|
|
} else {
|
|
document.querySelector<HTMLInputElement>('#enable-openid-signup input')!.checked = false;
|
|
}
|
|
});
|
|
document.querySelector<HTMLInputElement>('#disable-registration input')!.addEventListener('change', function () {
|
|
if (this.checked) {
|
|
document.querySelector<HTMLInputElement>('#enable-captcha input')!.checked = false;
|
|
document.querySelector<HTMLInputElement>('#enable-openid-signup input')!.checked = false;
|
|
} else {
|
|
document.querySelector<HTMLInputElement>('#enable-openid-signup input')!.checked = true;
|
|
}
|
|
});
|
|
document.querySelector<HTMLInputElement>('#enable-captcha input')!.addEventListener('change', function () {
|
|
if (this.checked) {
|
|
document.querySelector<HTMLInputElement>('#disable-registration input')!.checked = false;
|
|
}
|
|
});
|
|
}
|
|
|
|
function initPostInstall() {
|
|
const el = document.querySelector('#goto-after-install');
|
|
if (!el) return;
|
|
|
|
const targetUrl = el.getAttribute('href')!;
|
|
let tid: ReturnType<typeof setInterval> | null = setInterval(async () => {
|
|
try {
|
|
const resp = await GET(targetUrl);
|
|
if (tid && resp.status === 200) {
|
|
clearInterval(tid);
|
|
tid = null;
|
|
window.location.assign(targetUrl);
|
|
}
|
|
} catch {}
|
|
}, 1000);
|
|
}
|