Add migration.

models/auth/auth_token.go

@@ -15,7 +15,7 @@ import (
 
 var ErrAuthTokenNotExist = util.NewNotExistErrorf("auth token does not exist")
 
-type AuthToken struct {
+type AuthToken struct { //nolint:revive
 	ID          string `xorm:"pk"`
 	TokenHash   string
 	UserID      int64 `xorm:"INDEX"`

models/migrations/migrations.go

@@ -523,6 +523,8 @@ var migrations = []Migration{
 	NewMigration("Drop deleted branch table", v1_21.DropDeletedBranchTable),
 	// v270 -> v271
 	NewMigration("Fix PackageProperty typo", v1_21.FixPackagePropertyTypo),
+	// v271 -> v272
+	NewMigration("Add auth_token table", v1_21.CreateAuthTokenTable),
 }
 
 // GetCurrentDBVersion returns the current db version

models/migrations/v1_21/v271.go

@@ -0,0 +1,21 @@
+// Copyright 2023 The Gitea Authors. All rights reserved.
+// SPDX-License-Identifier: MIT
+
+package v1_21 //nolint
+
+import (
+	"code.gitea.io/gitea/modules/timeutil"
+
+	"xorm.io/xorm"
+)
+
+func CreateAuthTokenTable(x *xorm.Engine) error {
+	type AuthToken struct {
+		ID          string `xorm:"pk"`
+		TokenHash   string
+		UserID      int64 `xorm:"INDEX"`
+		ExpiresUnix timeutil.TimeStamp
+	}
+
+	return x.Sync(new(AuthToken))
+}

services/auth/auth_token.go

@@ -18,6 +18,8 @@ import (
 	"code.gitea.io/gitea/modules/util"
 )
 
+// Based on https://paragonie.com/blog/2015/04/secure-authentication-php-with-long-term-persistence#secure-remember-me-cookies
+
 var (
 	ErrAuthTokenInvalidFormat = util.NewInvalidArgumentErrorf("auth token has an invalid format")
 	ErrAuthTokenExpired       = util.NewInvalidArgumentErrorf("auth token has expired")