Support github refresh tokens

[anbraten]

closes #3804

Changes

• add expiry when creating user
• rename user.Token to AccessToken
• rename user.Secret to RefreshToken
• add support for github refresh tokens, ignore them if not provided as using an oauth app
• add expiry to gitlab login (prevent direct refresh)

[woodpecker-bot]

Deploying preview to https://woodpecker-ci-woodpecker-pr-3811.surge.sh

[codecov]

Codecov Report

Attention: Patch coverage is 31.09244% with 82 lines in your changes missing coverage. Please review.

Project coverage is 26.17%. Comparing base (c10d0e0) to head (03a87a0).
Report is 3 commits behind head on main.

Files with missing lines	Patch %	Lines
server/forge/github/github.go	5.40%	35 Missing ⚠️
server/forge/gitlab/gitlab.go	21.05%	15 Missing ⚠️
server/forge/forgejo/forgejo.go	42.10%	11 Missing ⚠️
server/forge/gitea/gitea.go	42.10%	11 Missing ⚠️
server/forge/addon/args.go	0.00%	4 Missing ⚠️
...r/forge/bitbucketdatacenter/bitbucketdatacenter.go	33.33%	2 Missing ⚠️
server/forge/bitbucketdatacenter/convert.go	0.00%	2 Missing ⚠️
server/forge/common/utils.go	0.00%	2 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #3811      +/-   ##
==========================================
- Coverage   26.20%   26.17%   -0.03%     
==========================================
  Files         373      373              
  Lines       27038    27063      +25     
==========================================
+ Hits         7084     7085       +1     
- Misses      19298    19322      +24     
  Partials      656      656              

Flag	Coverage Δ
	26.17% <31.09%> (-0.03%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[eliasscosta]

Could you update the branch and generate a new version of this PR? I want to test it.

[eliasscosta]

I ran a test with this version, using a GitHub APP and some permissions need to be set up for correct integration.

Maybe, we need more permission, but the simplest usage, activation, push, and deployment work as expected, I will continue testing the refresh token usage.

Repositories:

• Webhook - Read and Write
• Deployments - Read and Write
• Checks - Read and Write
• Status - Read and Write

Organization

• Members - Read

Accounts

• Email address - Read

I don't know why after I moved to the GitHub App, the status on GitHub got my profile picture.

[6543]

it looks ready why is it still a draft?

[anbraten]

I think the code is ready. Haven't tested it by myself yet.