Support github refresh tokens

[anbraten]

closes #3804

Changes

• add expiry when creating user
• rename user.Token to AccessToken
• rename user.Secret to RefreshToken
• add support for github refresh tokens, ignore them if not provided as using an oauth app
• add expiry to gitlab login (prevent direct refresh)

[woodpecker-bot]

Deployment of preview was torn down

[codecov]

Codecov Report

Attention: Patch coverage is 31.09244% with 82 lines in your changes missing coverage. Please review.

Project coverage is 26.50%. Comparing base (785f2e6) to head (6a4f2f1).
Report is 90 commits behind head on main.

Files with missing lines	Patch %	Lines
server/forge/github/github.go	5.40%	35 Missing ⚠️
server/forge/gitlab/gitlab.go	21.05%	15 Missing ⚠️
server/forge/forgejo/forgejo.go	42.10%	11 Missing ⚠️
server/forge/gitea/gitea.go	42.10%	11 Missing ⚠️
server/forge/addon/args.go	0.00%	4 Missing ⚠️
...r/forge/bitbucketdatacenter/bitbucketdatacenter.go	33.33%	2 Missing ⚠️
server/forge/bitbucketdatacenter/convert.go	0.00%	2 Missing ⚠️
server/forge/common/utils.go	0.00%	2 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #3811      +/-   ##
==========================================
- Coverage   26.52%   26.50%   -0.03%     
==========================================
  Files         377      377              
  Lines       27451    27476      +25     
==========================================
+ Hits         7282     7283       +1     
- Misses      19504    19528      +24     
  Partials      665      665              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

---

🚨 Try these New Features:

• Flaky Tests Detection - Detect and resolve failed and flaky tests
• JS Bundle Analysis - Avoid shipping oversized bundles

[eliasscosta]

Could you update the branch and generate a new version of this PR? I want to test it.

[eliasscosta]

I ran a test with this version, using a GitHub APP and some permissions need to be set up for correct integration.

Maybe, we need more permission, but the simplest usage, activation, push, and deployment work as expected, I will continue testing the refresh token usage.

Repositories:

• Webhook - Read and Write
• Deployments - Read and Write
• Checks - Read and Write
• Status - Read and Write

Organization

• Members - Read

Accounts

• Email address - Read

I don't know why after I moved to the GitHub App, the status on GitHub got my profile picture.

[6543]

it looks ready why is it still a draft?

[anbraten]

I think the code is ready. Haven't tested it by myself yet.

[pat-s]

Let's test it a bit before releasing. Good to have it in 3.0.

Thanks for all the work!