[F3] Forgejo driver and CLI

user, topic, project, label, milestone, repository, pull_request, release, asset, comment, reaction, review providers Signed-off-by: Earl Warren <contact@earl-warren.org> Preserve file size when creating attachments Introduced in c6f5029708 repoList.LoadAttributes has a ctx argument now Rename `repo.GetOwner` to `repo.LoadOwner` bd66fa586a upgrade to the latest gof3 (cherry picked from commit c770713656) [F3] ID remapping logic is in place, remove workaround (cherry picked from commit d0fee30167) [F3] it is experimental, do not enable by default (cherry picked from commit de325b21d0) (cherry picked from commit 547e7b3c40) (cherry picked from commit 820df3a56b) (cherry picked from commit eaba87689b) (cherry picked from commit 1b86896b3b) (cherry picked from commit 0046aac1c6) (cherry picked from commit f14220df8f) (cherry picked from commit 559b731001) (cherry picked from commit 801f7d600d) (cherry picked from commit 6aa76e9bcf) (cherry picked from commit a8757dcb07) [F3] promote F3 users to matching OAuth2 users on first sign-in (cherry picked from commit bd7fef7496) (cherry picked from commit 07412698e8) (cherry picked from commit d143e5b2a3) [F3] upgrade to gof3 50a6e740ac04 Add new methods GetIDString() & SetIDString() & ToFormatInterface() Change the prototype of the fixture function (cherry picked from commit d7b263ff8b) (cherry picked from commit b3eaf2249d) (cherry picked from commit d492ddd9bb) [F3] add GetLocalMatchingRemote with a default implementation (cherry picked from commit 0a22015039) (cherry picked from commit f1310c38fb) (cherry picked from commit deb68552f2) [F3] GetLocalMatchingRemote for user (cherry picked from commit e73cb837f5) (cherry picked from commit a24bc0b85e) (cherry picked from commit 846a522ecc) [F3] GetAdminUser now has a ctx argument (cherry picked from commit 37357a92af) (cherry picked from commit 660bc1673c)
2024-11-17 19:46:18 +00:00 · 2022-09-06 14:35:43 +10:00 · 2022-09-06 14:35:43 +10:00 · 72d692a767
parent ad2fedb693
commit 72d692a767
34 changed files with 3374 additions and 19 deletions
--- a/.golangci.yml
+++ b/.golangci.yml
@ -106,6 +106,9 @@ issues:
        - gosec
        - unparam
        - staticcheck
+    - path: services/f3/driver/base.go
+      linters:
+        - gosimple
    - path: models/migrations/v
      linters:
        - gocyclo
--- a/assets/go-licenses.json
+++ b/assets/go-licenses.json
@ -529,6 +529,11 @@
    "path": "github.com/golang/snappy/LICENSE",
    "licenseText": "Copyright (c) 2011 The Snappy-Go Authors. All rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google Inc. nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"
  },
+  {
+    "name": "github.com/google/go-cmp/cmp",
+    "path": "github.com/google/go-cmp/cmp/LICENSE",
+    "licenseText": "Copyright (c) 2017 The Go Authors. All rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google Inc. nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"
+  },
  {
    "name": "github.com/google/go-github/v53/github",
    "path": "github.com/google/go-github/v53/github/LICENSE",
@ -1084,6 +1089,11 @@
    "path": "golang.org/x/crypto/LICENSE",
    "licenseText": "Copyright (c) 2009 The Go Authors. All rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google Inc. nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"
  },
+  {
+    "name": "golang.org/x/exp",
+    "path": "golang.org/x/exp/LICENSE",
+    "licenseText": "Copyright (c) 2009 The Go Authors. All rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google Inc. nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"
+  },
  {
    "name": "golang.org/x/image",
    "path": "golang.org/x/image/LICENSE",
@ -1164,6 +1174,11 @@
    "path": "gopkg.in/yaml.v3/LICENSE",
    "licenseText": "\nThis project is covered by two different licenses: MIT and Apache.\n\n#### MIT License ####\n\nThe following files were ported to Go from C files of libyaml, and thus\nare still covered by their original MIT license, with the additional\ncopyright staring in 2011 when the project was ported over:\n\n    apic.go emitterc.go parserc.go readerc.go scannerc.go\n    writerc.go yamlh.go yamlprivateh.go\n\nCopyright (c) 2006-2010 Kirill Simonov\nCopyright (c) 2006-2011 Kirill Simonov\n\nPermission is hereby granted, free of charge, to any person obtaining a copy of\nthis software and associated documentation files (the \"Software\"), to deal in\nthe Software without restriction, including without limitation the rights to\nuse, copy, modify, merge, publish, distribute, sublicense, and/or sell copies\nof the Software, and to permit persons to whom the Software is furnished to do\nso, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n\n### Apache License ###\n\nAll the remaining project files are covered by the Apache license:\n\nCopyright (c) 2011-2019 Canonical Ltd\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n"
  },
+  {
+    "name": "lab.forgefriends.org/friendlyforgeformat/gof3",
+    "path": "lab.forgefriends.org/friendlyforgeformat/gof3/LICENSE",
+    "licenseText": "Permission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n"
+  },
  {
    "name": "mvdan.cc/xurls/v2",
    "path": "mvdan.cc/xurls/v2/LICENSE",
--- a/cmd/f3.go
+++ b/cmd/f3.go
@ -0,0 +1,136 @@
+// SPDX-License-Identifier: MIT
+
+package cmd
+
+import (
+	"context"
+	"fmt"
+
+	auth_model "code.gitea.io/gitea/models/auth"
+	user_model "code.gitea.io/gitea/models/user"
+	"code.gitea.io/gitea/modules/git"
+	"code.gitea.io/gitea/services/f3/util"
+
+	"github.com/urfave/cli"
+	"lab.forgefriends.org/friendlyforgeformat/gof3"
+	f3_common "lab.forgefriends.org/friendlyforgeformat/gof3/forges/common"
+	f3_format "lab.forgefriends.org/friendlyforgeformat/gof3/format"
+)
+
+var CmdF3 = cli.Command{
+	Name:        "f3",
+	Usage:       "Friendly Forge Format (F3) format export/import.",
+	Description: "Import or export a repository from or to the Friendly Forge Format (F3) format.",
+	Action:      runF3,
+	Flags: []cli.Flag{
+		cli.StringFlag{
+			Name:  "directory",
+			Value: "./f3",
+			Usage: "Path of the directory where the F3 dump is stored",
+		},
+		cli.StringFlag{
+			Name:  "user",
+			Value: "",
+			Usage: "The name of the user who owns the repository",
+		},
+		cli.StringFlag{
+			Name:  "repository",
+			Value: "",
+			Usage: "The name of the repository",
+		},
+		cli.StringFlag{
+			Name:  "authentication-source",
+			Value: "",
+			Usage: "The name of the authentication source matching the forge of origin",
+		},
+		cli.BoolFlag{
+			Name:  "no-pull-request",
+			Usage: "Do not dump pull requests",
+		},
+		cli.BoolFlag{
+			Name:  "import",
+			Usage: "Import from the directory",
+		},
+		cli.BoolFlag{
+			Name:  "export",
+			Usage: "Export to the directory",
+		},
+	},
+}
+
+func runF3(ctx *cli.Context) error {
+	stdCtx, cancel := installSignals()
+	defer cancel()
+
+	if err := initDB(stdCtx); err != nil {
+		return err
+	}
+
+	if err := git.InitSimple(stdCtx); err != nil {
+		return err
+	}
+
+	return RunF3(stdCtx, ctx)
+}
+
+func getAuthenticationSource(ctx context.Context, authenticationSource string) (*auth_model.Source, error) {
+	source, err := auth_model.GetSourceByName(ctx, authenticationSource)
+	if err != nil {
+		if auth_model.IsErrSourceNotExist(err) {
+			return nil, nil
+		}
+		return nil, err
+	}
+	return source, nil
+}
+
+func RunF3(stdCtx context.Context, ctx *cli.Context) error {
+	doer, err := user_model.GetAdminUser(stdCtx)
+	if err != nil {
+		return err
+	}
+
+	features := gof3.AllFeatures
+	if ctx.Bool("no-pull-request") {
+		features.PullRequests = false
+	}
+
+	var sourceID int64
+	sourceName := ctx.String("authentication-source")
+	source, err := getAuthenticationSource(stdCtx, sourceName)
+	if err != nil {
+		return fmt.Errorf("error retrieving the authentication-source %s %v", sourceName, err)
+	}
+	if source != nil {
+		sourceID = source.ID
+	}
+
+	forgejo := util.ForgejoForgeRoot(features, doer, sourceID)
+	f3 := util.F3ForgeRoot(features, ctx.String("directory"))
+
+	if ctx.Bool("export") {
+		forgejo.Forge.Users.List(stdCtx)
+		user := forgejo.Forge.Users.GetFromFormat(stdCtx, &f3_format.User{UserName: ctx.String("user")})
+		if user.IsNil() {
+			return fmt.Errorf("%s is not a known user", ctx.String("user"))
+		}
+
+		user.Projects.List(stdCtx)
+		project := user.Projects.GetFromFormat(stdCtx, &f3_format.Project{Name: ctx.String("repository")})
+		if project.IsNil() {
+			return fmt.Errorf("%s/%s is not a known repository", ctx.String("user"), ctx.String("repository"))
+		}
+
+		options := f3_common.NewMirrorOptionsRecurse(user, project)
+		f3.Forge.Mirror(stdCtx, forgejo.Forge, options)
+		fmt.Println("exported")
+	} else if ctx.Bool("import") {
+		options := f3_common.NewMirrorOptionsRecurse()
+		forgejo.Forge.Mirror(stdCtx, f3.Forge, options)
+		fmt.Println("imported")
+	} else {
+		return fmt.Errorf("either --import or --export must be specified")
+	}
+
+	return nil
+}
--- a/custom/conf/app.example.ini
+++ b/custom/conf/app.example.ini
@ -2360,6 +2360,15 @@ LEVEL = Info
 ;; If a domain is allowed by ALLOWED_DOMAINS, this option will be ignored.
 ;ALLOW_LOCALNETWORKS = false

+;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+;[F3]
+;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+;;
+;; Enable/Disable Friendly Forge Format (F3)
+;ENABLED = false
+
 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
 ;[federation]
--- a/go.mod
+++ b/go.mod
@ -5,7 +5,7 @@ go 1.20
 require (
 	code.gitea.io/actions-proto-go v0.3.1
 	code.gitea.io/gitea-vet v0.2.2
-	code.gitea.io/sdk/gitea v0.15.1
+	code.gitea.io/sdk/gitea v0.15.1-0.20230419161926-24a404e5610c
 	codeberg.org/gusted/mcaptcha v0.0.0-20220723083913-4f3072e1d570
 	gitea.com/go-chi/binding v0.0.0-20230415142243-04b515c6d669
 	gitea.com/go-chi/cache v0.2.0
@ -119,6 +119,7 @@ require (
 	gopkg.in/gomail.v2 v2.0.0-20160411212932-81ebce5c23df
 	gopkg.in/ini.v1 v1.67.0
 	gopkg.in/yaml.v3 v3.0.1
+	lab.forgefriends.org/friendlyforgeformat/gof3 v0.0.0-20230701182935-ce3394d54c1e
 	mvdan.cc/xurls/v2 v2.5.0
 	strk.kbt.io/projects/go/libravatar v0.0.0-20191008002943-06d1c002b251
 	xorm.io/builder v0.3.12
@ -171,6 +172,7 @@ require (
 	github.com/couchbase/goutils v0.1.2 // indirect
 	github.com/cpuguy83/go-md2man/v2 v2.0.2 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
+	github.com/davidmz/go-pageant v1.0.2 // indirect
 	github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
 	github.com/dlclark/regexp2 v1.10.0 // indirect
 	github.com/emersion/go-sasl v0.0.0-20220912192320-0145f2c60ead // indirect
@ -202,6 +204,7 @@ require (
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
 	github.com/golang/protobuf v1.5.3 // indirect
 	github.com/golang/snappy v0.0.4 // indirect
+	github.com/google/go-cmp v0.5.9 // indirect
 	github.com/google/go-querystring v1.1.0 // indirect
 	github.com/google/go-tpm v0.9.0 // indirect
 	github.com/gorilla/css v1.0.0 // indirect
@ -287,6 +290,7 @@ require (
 	go.uber.org/atomic v1.11.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.24.0 // indirect
+	golang.org/x/exp v0.0.0-20220516143420-24438e51023a // indirect
 	golang.org/x/mod v0.12.0 // indirect
 	golang.org/x/sync v0.3.0 // indirect
 	golang.org/x/time v0.3.0 // indirect
--- a/go.sum
+++ b/go.sum
@ -42,11 +42,10 @@ cloud.google.com/go/storage v1.10.0/go.mod h1:FLPqc6j+Ki4BU591ie1oL6qBQGu2Bl/tZ9
 cloud.google.com/go/storage v1.14.0/go.mod h1:GrKmX003DSIwi9o29oFT7YDnHYwZoctc3fOKtUw0Xmo=
 code.gitea.io/actions-proto-go v0.3.1 h1:PMyiQtBKb8dNnpEO2R5rcZdXSis+UQZVo/SciMtR1aU=
 code.gitea.io/actions-proto-go v0.3.1/go.mod h1:00ys5QDo1iHN1tHNvvddAcy2W/g+425hQya1cCSvq9A=
-code.gitea.io/gitea-vet v0.2.1/go.mod h1:zcNbT/aJEmivCAhfmkHOlT645KNOf9W2KnkLgFjGGfE=
 code.gitea.io/gitea-vet v0.2.2 h1:TEOV/Glf38iGmKzKP0EB++Z5OSL4zGg3RrAvlwaMuvk=
 code.gitea.io/gitea-vet v0.2.2/go.mod h1:zcNbT/aJEmivCAhfmkHOlT645KNOf9W2KnkLgFjGGfE=
-code.gitea.io/sdk/gitea v0.15.1 h1:WJreC7YYuxbn0UDaPuWIe/mtiNKTvLN8MLkaw71yx/M=
-code.gitea.io/sdk/gitea v0.15.1/go.mod h1:klY2LVI3s3NChzIk/MzMn7G1FHrfU7qd63iSMVoHRBA=
+code.gitea.io/sdk/gitea v0.15.1-0.20230419161926-24a404e5610c h1:Fii6iLyyhq49iJqzudOUgE1OfrhYTH+8/tD4ykNf35U=
+code.gitea.io/sdk/gitea v0.15.1-0.20230419161926-24a404e5610c/go.mod h1:ndkDk99BnfiUCCYEUhpNzi0lpmApXlwRFqClBlOlEBg=
 codeberg.org/gusted/mcaptcha v0.0.0-20220723083913-4f3072e1d570 h1:TXbikPqa7YRtfU9vS6QJBg77pUvbEb6StRdZO8t1bEY=
 codeberg.org/gusted/mcaptcha v0.0.0-20220723083913-4f3072e1d570/go.mod h1:IIAjsijsd8q1isWX8MACefDEgTQslQ4stk2AeeTt3kM=
 dmitri.shuralyov.com/gpu/mtl v0.0.0-20190408044501-666a987793e9/go.mod h1:H6x//7gZCb22OMCxBHrMx7a5I7Hp++hsVxbQ4BYO7hU=
@ -280,6 +279,8 @@ github.com/cupcake/rdb v0.0.0-20161107195141-43ba34106c76/go.mod h1:vYwsqCOLxGii
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davidmz/go-pageant v1.0.2 h1:bPblRCh5jGU+Uptpz6LgMZGD5hJoOt7otgT454WvHn0=
+github.com/davidmz/go-pageant v1.0.2/go.mod h1:P2EDDnMqIwG5Rrp05dTRITj9z2zpGcD9efWSkTNKLIE=
 github.com/decred/dcrd/crypto/blake256 v1.0.0/go.mod h1:sQl2p6Y26YV+ZOcSTP6thNdn47hh8kt6rqSlvmrXFAc=
 github.com/decred/dcrd/dcrec/secp256k1/v4 v4.0.0-20210816181553-5444fa50b93d/go.mod h1:tmAIfUFEirG/Y8jhZ9M+h36obRZAk/1fcSpXwAVlfqE=
 github.com/denisenkom/go-mssqldb v0.10.0/go.mod h1:xbL0rPBG9cCiLr28tMa8zpbdarY27NDyej4t/EjAShU=
@ -380,6 +381,7 @@ github.com/go-faster/city v1.0.1 h1:4WAxSZ3V2Ws4QRDrscLEDcibJY8uf41H6AhXDrNDcGw=
 github.com/go-faster/city v1.0.1/go.mod h1:jKcUJId49qdW3L1qKHH/3wPeUstCVpVSXTM6vO3VcTw=
 github.com/go-faster/errors v0.6.1 h1:nNIPOBkprlKzkThvS/0YaX8Zs9KewLCOSFQS5BU06FI=
 github.com/go-faster/errors v0.6.1/go.mod h1:5MGV2/2T9yvlrbhe9pD9LO5Z/2zCSq2T8j+Jpi2LAyY=
+github.com/go-fed/httpsig v1.1.0/go.mod h1:RCMrTZvN1bJYtofsG4rd5NaO5obxQ5xBkdiS7xsT7bM=
 github.com/go-fed/httpsig v1.1.1-0.20201223112313-55836744818e h1:oRq/fiirun5HqlEWMLIcDmLpIELlG4iGbd0s8iqgPi8=
 github.com/go-fed/httpsig v1.1.1-0.20201223112313-55836744818e/go.mod h1:RCMrTZvN1bJYtofsG4rd5NaO5obxQ5xBkdiS7xsT7bM=
 github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 h1:+zs/tPmkDkHx3U66DAb0lQFJrpS6731Oaa12ikc+DiI=
@ -561,6 +563,7 @@ github.com/google/go-cmp v0.5.3/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/
 github.com/google/go-cmp v0.5.4/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.9 h1:O2Tfq5qg4qc4AmwVlvv0oLiVAGB7enBSJ2x2DqQFi38=
+github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
 github.com/google/go-github/v53 v53.2.0 h1:wvz3FyF53v4BK+AsnvCmeNhf8AkTaeh2SoYu/XUvTtI=
 github.com/google/go-github/v53 v53.2.0/go.mod h1:XhFRObz+m/l+UCm9b7KSIC3lT3NWSXGt7mOsAWEloao=
 github.com/google/go-querystring v1.1.0 h1:AnCroh3fv4ZBgVIf1Iwtovgjaw/GiKJo8M8yD/fhyJ8=
@ -1287,9 +1290,11 @@ golang.org/x/crypto v0.0.0-20201203163018-be400aefbc4c/go.mod h1:jdWPYTVW3xRLrWP
 golang.org/x/crypto v0.0.0-20201221181555-eec23a3978ad/go.mod h1:jdWPYTVW3xRLrWPugEBEK3UY2ZEsg3UU495nc5E+M+I=
 golang.org/x/crypto v0.0.0-20210322153248-0c34fe9e7dc2/go.mod h1:T9bdIzuCu7OtxOm1hfPfRQxPLYneinmdGuTeoZ9dtd4=
 golang.org/x/crypto v0.0.0-20210421170649-83a5a9bb288b/go.mod h1:T9bdIzuCu7OtxOm1hfPfRQxPLYneinmdGuTeoZ9dtd4=
+golang.org/x/crypto v0.0.0-20210513164829-c07d793c2f9a/go.mod h1:P+XmwS30IXTQdn5tA2iutPOUgjI07+tq3H3K9MVA1s8=
 golang.org/x/crypto v0.0.0-20210616213533-5ff15b29337e/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20220214200702-86341886e292/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
+golang.org/x/crypto v0.0.0-20220525230936-793ad666bf5e/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.0.0-20220722155217-630584e8d5aa/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.0.0-20220826181053-bd7e27e6170d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
@ -1308,6 +1313,8 @@ golang.org/x/exp v0.0.0-20191227195350-da58074b4299/go.mod h1:2RIsYlXP63K8oxa1u0
 golang.org/x/exp v0.0.0-20200119233911-0405dc783f0a/go.mod h1:2RIsYlXP63K8oxa1u096TMicItID8zy7Y6sNkU49FU4=
 golang.org/x/exp v0.0.0-20200207192155-f17229e696bd/go.mod h1:J/WKrq2StrnmMY6+EHIKF9dgMWnmCNThgcyBT1FY9mM=
 golang.org/x/exp v0.0.0-20200224162631-6cc2880d07d6/go.mod h1:3jZMyOhIsHpP37uCMkUooju7aAi5cS1Q23tOzKc+0MU=
+golang.org/x/exp v0.0.0-20220516143420-24438e51023a h1:tiLLxEjKNE6Hrah/Dp/cyHvsyjDLcMFSocOHO5XDmOM=
+golang.org/x/exp v0.0.0-20220516143420-24438e51023a/go.mod h1:lgLbSvA5ygNOMpwM/9anMpWVlVJ7Z+cHWq/eFuinpGE=
 golang.org/x/image v0.0.0-20190227222117-0694c2d4d067/go.mod h1:kZ7UVZpmo3dzQBMxlp+ypCbDeSB+sBbTgSJuh5dn5js=
 golang.org/x/image v0.0.0-20190802002840-cff245a6509b/go.mod h1:FeLwcggjj3mMvU+oOTbSwawSJRM1uh48EjtB4UJZlP0=
 golang.org/x/image v0.9.0 h1:QrzfX26snvCM20hIhBwuHI/ThTg18b/+kcKdXHvnR+g=
@ -1767,6 +1774,8 @@ honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWh
 honnef.co/go/tools v0.0.1-2019.2.3/go.mod h1:a3bituU0lyd329TUQxRnasdCoJDkEUEAqEt0JzvZhAg=
 honnef.co/go/tools v0.0.1-2020.1.3/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
 honnef.co/go/tools v0.0.1-2020.1.4/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
+lab.forgefriends.org/friendlyforgeformat/gof3 v0.0.0-20230701182935-ce3394d54c1e h1:dcD+UGLSrgeHYyEWZ+1mZvxQ2BXKyEhjhHcB7a6XgeA=
+lab.forgefriends.org/friendlyforgeformat/gof3 v0.0.0-20230701182935-ce3394d54c1e/go.mod h1:yIlQydnn+pym6OH20iQ7fbe2TjLfnlOTtEOqvjFaC70=
 lukechampine.com/uint128 v1.1.1 h1:pnxCASz787iMf+02ssImqk6OLt+Z5QHMoZyUXR4z6JU=
 lukechampine.com/uint128 v1.1.1/go.mod h1:c4eWIwlEGaxC/+H1VguhU4PHXNWDCDMUlWdIWl2j1gk=
 modernc.org/cc/v3 v3.33.6/go.mod h1:iPJg1pkwXqAV16SNgFBVYmggfMg6xhs+2oiO0vclK3g=
--- a/main.go
+++ b/main.go
@ -135,6 +135,7 @@ func mainApp(subCmds ...cli.Command) {
 		cmd.CmdKeys,
 		cmd.CmdConvert,
 		cmd.CmdDoctor,
+		cmd.CmdF3,
 		cmd.CmdManager,
 		cmd.CmdEmbedded,
 		cmd.CmdMigrateStorage,
--- a/models/auth/source.go
+++ b/models/auth/source.go
@ -33,6 +33,9 @@ const (
 	SSPI        // 7
 )

+// This should be in the above list of types but is separated to avoid conflicts with Gitea changes
+const F3 Type = 129
+
 // String returns the string name of the LoginType
 func (typ Type) String() string {
 	return Names[typ]
@ -51,6 +54,7 @@ var Names = map[Type]string{
 	PAM:    "PAM",
 	OAuth2: "OAuth2",
 	SSPI:   "SPNEGO with SSPI",
+	F3:     "F3",
 }

 // Config represents login config as far as the db is concerned
@ -179,6 +183,10 @@ func (source *Source) IsSSPI() bool {
 	return source.Type == SSPI
 }

+func (source *Source) IsF3() bool {
+	return source.Type == F3
+}
+
 // HasTLS returns true of this source supports TLS.
 func (source *Source) HasTLS() bool {
 	hasTLSer, ok := source.Cfg.(HasTLSer)
--- a/models/repo/topic.go
+++ b/models/repo/topic.go
@ -230,6 +230,21 @@ func GetRepoTopicByName(ctx context.Context, repoID int64, topicName string) (*T
 	return nil, err
 }

+// GetRepoTopicByID retrieves topic from ID for a repo if it exist
+func GetRepoTopicByID(ctx context.Context, repoID, topicID int64) (*Topic, error) {
+	cond := builder.NewCond()
+	var topic Topic
+	cond = cond.And(builder.Eq{"repo_topic.repo_id": repoID}).And(builder.Eq{"topic.id": topicID})
+	sess := db.GetEngine(ctx).Table("topic").Where(cond)
+	sess.Join("INNER", "repo_topic", "repo_topic.topic_id = topic.id")
+	if has, err := sess.Select("topic.*").Get(&topic); err != nil {
+		return nil, err
+	} else if !has {
+		return nil, ErrTopicNotExist{""}
+	}
+	return &topic, nil
+}
+
 // AddTopic adds a topic name to a repository (if it does not already have it)
 func AddTopic(repoID int64, topicName string) (*Topic, error) {
 	ctx, committer, err := db.TxContext(db.DefaultContext)
--- a/modules/setting/f3.go
+++ b/modules/setting/f3.go
@ -0,0 +1,22 @@
+// SPDX-License-Identifier: MIT
+
+package setting
+
+import (
+	"code.gitea.io/gitea/modules/log"
+)
+
+// Friendly Forge Format (F3) settings
+var (
+	F3 = struct {
+		Enabled bool
+	}{
+		Enabled: false,
+	}
+)
+
+func loadF3From(rootCfg ConfigProvider) {
+	if err := rootCfg.Section("F3").MapTo(&F3); err != nil {
+		log.Fatal("Failed to map F3 settings: %v", err)
+	}
+}
--- a/modules/setting/setting.go
+++ b/modules/setting/setting.go
@ -218,6 +218,7 @@ func LoadSettings() {
 	loadProjectFrom(CfgProvider)
 	loadMimeTypeMapFrom(CfgProvider)
 	loadFederationFrom(CfgProvider)
+	loadF3From(CfgProvider)
 }

 // LoadSettingsForInstall initializes the settings for install
--- a/routers/web/auth/oauth.go
+++ b/routers/web/auth/oauth.go
@ -33,6 +33,7 @@ import (
 	source_service "code.gitea.io/gitea/services/auth/source"
 	"code.gitea.io/gitea/services/auth/source/oauth2"
 	"code.gitea.io/gitea/services/externalaccount"
+	f3_service "code.gitea.io/gitea/services/f3"
 	"code.gitea.io/gitea/services/forms"
 	user_service "code.gitea.io/gitea/services/user"

@ -1208,9 +1209,21 @@ func handleOAuth2SignIn(ctx *context.Context, source *auth.Source, u *user_model
 	ctx.Redirect(setting.AppSubURL + "/user/two_factor")
 }

-// OAuth2UserLoginCallback attempts to handle the callback from the OAuth2 provider and if successful
-// login the user
 func oAuth2UserLoginCallback(authSource *auth.Source, request *http.Request, response http.ResponseWriter) (*user_model.User, goth.User, error) {
+	gothUser, err := oAuth2FetchUser(authSource, request, response)
+	if err != nil {
+		return nil, goth.User{}, err
+	}
+
+	if err := f3_service.MaybePromoteF3User(request.Context(), authSource, gothUser.UserID, gothUser.Email); err != nil {
+		return nil, goth.User{}, err
+	}
+
+	u, err := oAuth2GothUserToUser(request.Context(), authSource, gothUser)
+	return u, gothUser, err
+}
+
+func oAuth2FetchUser(authSource *auth.Source, request *http.Request, response http.ResponseWriter) (goth.User, error) {
 	oauth2Source := authSource.Cfg.(*oauth2.Source)

 	// Make sure that the response is not an error response.
@ -1222,10 +1235,10 @@ func oAuth2UserLoginCallback(authSource *auth.Source, request *http.Request, res
 		// Delete the goth session
 		err := gothic.Logout(response, request)
 		if err != nil {
-			return nil, goth.User{}, err
+			return goth.User{}, err
 		}

-		return nil, goth.User{}, errCallback{
+		return goth.User{}, errCallback{
 			Code:        errorName,
 			Description: errorDescription,
 		}
@ -1238,24 +1251,28 @@ func oAuth2UserLoginCallback(authSource *auth.Source, request *http.Request, res
 			log.Error("OAuth2 Provider %s returned too long a token. Current max: %d. Either increase the [OAuth2] MAX_TOKEN_LENGTH or reduce the information returned from the OAuth2 provider", authSource.Name, setting.OAuth2.MaxTokenLength)
 			err = fmt.Errorf("OAuth2 Provider %s returned too long a token. Current max: %d. Either increase the [OAuth2] MAX_TOKEN_LENGTH or reduce the information returned from the OAuth2 provider", authSource.Name, setting.OAuth2.MaxTokenLength)
 		}
-		return nil, goth.User{}, err
+		return goth.User{}, err
 	}

 	if oauth2Source.RequiredClaimName != "" {
 		claimInterface, has := gothUser.RawData[oauth2Source.RequiredClaimName]
 		if !has {
-			return nil, goth.User{}, user_model.ErrUserProhibitLogin{Name: gothUser.UserID}
+			return goth.User{}, user_model.ErrUserProhibitLogin{Name: gothUser.UserID}
 		}

 		if oauth2Source.RequiredClaimValue != "" {
 			groups := claimValueToStringSet(claimInterface)

 			if !groups.Contains(oauth2Source.RequiredClaimValue) {
-				return nil, goth.User{}, user_model.ErrUserProhibitLogin{Name: gothUser.UserID}
+				return goth.User{}, user_model.ErrUserProhibitLogin{Name: gothUser.UserID}
 			}
 		}
 	}

+	return gothUser, nil
+}
+
+func oAuth2GothUserToUser(ctx go_context.Context, authSource *auth.Source, gothUser goth.User) (*user_model.User, error) {
 	user := &user_model.User{
 		LoginName:   gothUser.UserID,
 		LoginType:   auth.OAuth2,
@ -1264,12 +1281,13 @@ func oAuth2UserLoginCallback(authSource *auth.Source, request *http.Request, res

 	hasUser, err := user_model.GetUser(user)
 	if err != nil {
-		return nil, goth.User{}, err
+		return nil, err
 	}

 	if hasUser {
-		return user, gothUser, nil
+		return user, nil
 	}
+	log.Debug("no user found for LoginName %v, LoginSource %v, LoginType %v", user.LoginName, user.LoginSource, user.LoginType)

 	// search in external linked users
 	externalLoginUser := &user_model.ExternalLoginUser{
@ -1278,13 +1296,13 @@ func oAuth2UserLoginCallback(authSource *auth.Source, request *http.Request, res
 	}
 	hasUser, err = user_model.GetExternalLogin(externalLoginUser)
 	if err != nil {
-		return nil, goth.User{}, err
+		return nil, err
 	}
 	if hasUser {
-		user, err = user_model.GetUserByID(request.Context(), externalLoginUser.UserID)
-		return user, gothUser, err
+		user, err = user_model.GetUserByID(ctx, externalLoginUser.UserID)
+		return user, err
 	}

 	// no user found to login
-	return nil, gothUser, nil
+	return nil, nil
 }
--- a/services/auth/source/f3/source.go
+++ b/services/auth/source/f3/source.go
@ -0,0 +1,33 @@
+// SPDX-FileCopyrightText: Copyright the Forgejo contributors
+// SPDX-License-Identifier: MIT
+
+package f3
+
+import (
+	"code.gitea.io/gitea/models/auth"
+	"code.gitea.io/gitea/modules/json"
+)
+
+type Source struct {
+	URL            string
+	MatchingSource string
+
+	// reference to the authSource
+	authSource *auth.Source
+}
+
+func (source *Source) FromDB(bs []byte) error {
+	return json.UnmarshalHandleDoubleEncode(bs, &source)
+}
+
+func (source *Source) ToDB() ([]byte, error) {
+	return json.Marshal(source)
+}
+
+func (source *Source) SetAuthSource(authSource *auth.Source) {
+	source.authSource = authSource
+}
+
+func init() {
+	auth.RegisterTypeConfig(auth.F3, &Source{})
+}
--- a/services/convert/pull_review.go
+++ b/services/convert/pull_review.go
@ -101,7 +101,7 @@ func ToPullReviewCommentList(ctx context.Context, review *issues_model.Review, d
 					Path:         comment.TreePath,
 					CommitID:     comment.CommitSHA,
 					OrigCommitID: comment.OldRef,
-					DiffHunk:     patch2diff(comment.Patch),
+					DiffHunk:     Patch2diff(comment.Patch),
 					HTMLURL:      comment.HTMLURL(),
 					HTMLPullURL:  review.Issue.HTMLURL(),
 				}
@ -118,7 +118,7 @@ func ToPullReviewCommentList(ctx context.Context, review *issues_model.Review, d
 	return apiComments, nil
 }

-func patch2diff(patch string) string {
+func Patch2diff(patch string) string {
 	split := strings.Split(patch, "\n@@")
 	if len(split) == 2 {
 		return "@@" + split[1]
--- a/services/f3/driver/asset.go
+++ b/services/f3/driver/asset.go
@ -0,0 +1,169 @@
+// SPDX-License-Identifier: MIT
+
+package driver
+
+import (
+	"context"
+	"fmt"
+	"io"
+	"net/http"
+
+	repo_model "code.gitea.io/gitea/models/repo"
+	"code.gitea.io/gitea/modules/timeutil"
+	"code.gitea.io/gitea/services/attachment"
+
+	"github.com/google/uuid"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/format"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/util"
+)
+
+type Asset struct {
+	repo_model.Attachment
+	DownloadFunc func() io.ReadCloser
+}
+
+func AssetConverter(f *repo_model.Attachment) *Asset {
+	return &Asset{
+		Attachment: *f,
+	}
+}
+
+func (o Asset) GetID() int64 {
+	return o.ID
+}
+
+func (o Asset) GetIDString() string {
+	return fmt.Sprintf("%d", o.GetID())
+}
+
+func (o *Asset) SetID(id int64) {
+	o.ID = id
+}
+
+func (o *Asset) SetIDString(id string) {
+	o.SetID(util.ParseInt(id))
+}
+
+func (o *Asset) IsNil() bool {
+	return o.ID == 0
+}
+
+func (o *Asset) Equals(other *Asset) bool {
+	return o.Name == other.Name
+}
+
+func (o *Asset) ToFormatInterface() format.Interface {
+	return o.ToFormat()
+}
+
+func (o *Asset) ToFormat() *format.ReleaseAsset {
+	return &format.ReleaseAsset{
+		Common:        format.NewCommon(o.ID),
+		Name:          o.Name,
+		Size:          int(o.Size),
+		DownloadCount: int(o.DownloadCount),
+		Created:       o.CreatedUnix.AsTime(),
+		DownloadURL:   o.DownloadURL(),
+		DownloadFunc:  o.DownloadFunc,
+	}
+}
+
+func (o *Asset) FromFormat(asset *format.ReleaseAsset) {
+	*o = Asset{
+		Attachment: repo_model.Attachment{
+			ID:            asset.GetID(),
+			Name:          asset.Name,
+			Size:          int64(asset.Size),
+			DownloadCount: int64(asset.DownloadCount),
+			CreatedUnix:   timeutil.TimeStamp(asset.Created.Unix()),
+		},
+		DownloadFunc: asset.DownloadFunc,
+	}
+}
+
+type AssetProvider struct {
+	BaseProvider
+}
+
+func (o *AssetProvider) ToFormat(ctx context.Context, asset *Asset) *format.ReleaseAsset {
+	httpClient := o.g.GetNewMigrationHTTPClient()()
+	a := asset.ToFormat()
+	a.DownloadFunc = func() io.ReadCloser {
+		o.g.GetLogger().Debug("download from %s", asset.DownloadURL())
+		req, err := http.NewRequest("GET", asset.DownloadURL(), nil)
+		if err != nil {
+			panic(err)
+		}
+		resp, err := httpClient.Do(req)
+		if err != nil {
+			panic(fmt.Errorf("while downloading %s %w", asset.DownloadURL(), err))
+		}
+
+		// resp.Body is closed by the consumer
+		return resp.Body
+	}
+	return a
+}
+
+func (o *AssetProvider) FromFormat(ctx context.Context, p *format.ReleaseAsset) *Asset {
+	var asset Asset
+	asset.FromFormat(p)
+	return &asset
+}
+
+func (o *AssetProvider) ProcessObject(ctx context.Context, user *User, project *Project, release *Release, asset *Asset) {
+}
+
+func (o *AssetProvider) GetObjects(ctx context.Context, user *User, project *Project, release *Release, page int) []*Asset {
+	if page > 1 {
+		return []*Asset{}
+	}
+	r, err := repo_model.GetReleaseByID(ctx, release.GetID())
+	if err != nil {
+		panic(err)
+	}
+	if err := r.LoadAttributes(ctx); err != nil {
+		panic(fmt.Errorf("error while listing assets: %v", err))
+	}
+
+	return util.ConvertMap[*repo_model.Attachment, *Asset](r.Attachments, AssetConverter)
+}
+
+func (o *AssetProvider) Get(ctx context.Context, user *User, project *Project, release *Release, exemplar *Asset) *Asset {
+	id := exemplar.GetID()
+	asset, err := repo_model.GetAttachmentByID(ctx, id)
+	if repo_model.IsErrAttachmentNotExist(err) {
+		return &Asset{}
+	}
+	if err != nil {
+		panic(err)
+	}
+	return AssetConverter(asset)
+}
+
+func (o *AssetProvider) Put(ctx context.Context, user *User, project *Project, release *Release, asset *Asset) *Asset {
+	asset.ID = 0
+	asset.UploaderID = user.GetID()
+	asset.RepoID = project.GetID()
+	asset.ReleaseID = release.GetID()
+	asset.UUID = uuid.New().String()
+
+	download := asset.DownloadFunc()
+	defer download.Close()
+	a, err := attachment.NewAttachment(&asset.Attachment, download, asset.Size)
+	if err != nil {
+		panic(err)
+	}
+	return o.Get(ctx, user, project, release, AssetConverter(a))
+}
+
+func (o *AssetProvider) Delete(ctx context.Context, user *User, project *Project, release *Release, asset *Asset) *Asset {
+	a := o.Get(ctx, user, project, release, asset)
+	if !a.IsNil() {
+		err := repo_model.DeleteAttachment(&a.Attachment, true)
+		if err != nil {
+			panic(err)
+		}
+	}
+	return a
+}
--- a/services/f3/driver/base.go
+++ b/services/f3/driver/base.go
@ -0,0 +1,54 @@
+// SPDX-License-Identifier: MIT
+
+package driver
+
+import (
+	"context"
+
+	"lab.forgefriends.org/friendlyforgeformat/gof3/forges/common"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/format"
+)
+
+type BaseProvider struct {
+	g *Forgejo
+}
+
+func (o *BaseProvider) SetForgejo(g *Forgejo) {
+	o.g = g
+}
+
+type BaseProviderConstraint[Provider any] interface {
+	*Provider
+	SetForgejo(*Forgejo)
+}
+
+func NewProvider[T any, TPtr BaseProviderConstraint[T]](g *Forgejo) TPtr {
+	var p TPtr
+	p = new(T)
+	p.SetForgejo(g)
+	return p
+}
+
+func (o *BaseProvider) GetLocalMatchingRemote(ctx context.Context, format format.Interface, parents ...common.ContainerObjectInterface) (string, bool) {
+	return "", false
+}
+
+type BaseProviderWithProjectProvider struct {
+	BaseProvider
+	project *ProjectProvider
+}
+
+func (o *BaseProviderWithProjectProvider) SetProjectProvider(project *ProjectProvider) {
+	o.project = project
+}
+
+type BaseProviderWithProjectProviderConstraint[Provider any] interface {
+	BaseProviderConstraint[Provider]
+	SetProjectProvider(project *ProjectProvider)
+}
+
+func NewProviderWithProjectProvider[T any, TPtr BaseProviderWithProjectProviderConstraint[T]](g *Forgejo, project *ProjectProvider) TPtr {
+	p := NewProvider[T, TPtr](g)
+	p.SetProjectProvider(project)
+	return p
+}
--- a/services/f3/driver/comment.go
+++ b/services/f3/driver/comment.go
@ -0,0 +1,162 @@
+// SPDX-License-Identifier: MIT
+
+package driver
+
+import (
+	"context"
+	"fmt"
+
+	"code.gitea.io/gitea/models/db"
+	issues_model "code.gitea.io/gitea/models/issues"
+	user_model "code.gitea.io/gitea/models/user"
+	"code.gitea.io/gitea/modules/timeutil"
+	issue_service "code.gitea.io/gitea/services/issue"
+
+	"lab.forgefriends.org/friendlyforgeformat/gof3/forges/common"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/format"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/util"
+)
+
+type Comment struct {
+	issues_model.Comment
+}
+
+func CommentConverter(f *issues_model.Comment) *Comment {
+	return &Comment{
+		Comment: *f,
+	}
+}
+
+func (o Comment) GetID() int64 {
+	return o.Comment.ID
+}
+
+func (o Comment) GetIDString() string {
+	return fmt.Sprintf("%d", o.GetID())
+}
+
+func (o *Comment) SetID(id int64) {
+	o.Comment.ID = id
+}
+
+func (o *Comment) SetIDString(id string) {
+	o.SetID(util.ParseInt(id))
+}
+
+func (o *Comment) IsNil() bool {
+	return o.ID == 0
+}
+
+func (o *Comment) Equals(other *Comment) bool {
+	return o.Comment.ID == other.Comment.ID
+}
+
+func (o *Comment) ToFormatInterface() format.Interface {
+	return o.ToFormat()
+}
+
+func (o *Comment) ToFormat() *format.Comment {
+	return &format.Comment{
+		IssueIndex: o.Comment.IssueID,
+		Common:     format.NewCommon(o.Comment.ID),
+		PosterID:   format.NewUserReference(o.Comment.Poster.ID),
+		Content:    o.Comment.Content,
+		Created:    o.Comment.CreatedUnix.AsTime(),
+		Updated:    o.Comment.UpdatedUnix.AsTime(),
+	}
+}
+
+func (o *Comment) FromFormat(comment *format.Comment) {
+	*o = Comment{
+		Comment: issues_model.Comment{
+			ID:       comment.GetID(),
+			PosterID: comment.PosterID.GetID(),
+			Poster: &user_model.User{
+				ID: comment.PosterID.GetID(),
+			},
+			Content:     comment.Content,
+			CreatedUnix: timeutil.TimeStamp(comment.Created.Unix()),
+			UpdatedUnix: timeutil.TimeStamp(comment.Updated.Unix()),
+		},
+	}
+}
+
+type CommentProvider struct {
+	BaseProvider
+}
+
+func (o *CommentProvider) ToFormat(ctx context.Context, comment *Comment) *format.Comment {
+	return comment.ToFormat()
+}
+
+func (o *CommentProvider) FromFormat(ctx context.Context, f *format.Comment) *Comment {
+	var comment Comment
+	comment.FromFormat(f)
+	return &comment
+}
+
+func (o *CommentProvider) GetObjects(ctx context.Context, user *User, project *Project, commentable common.ContainerObjectInterface, page int) []*Comment {
+	comments, err := issues_model.FindComments(ctx, &issues_model.FindCommentsOptions{
+		ListOptions: db.ListOptions{Page: page, PageSize: o.g.perPage},
+		RepoID:      project.GetID(),
+		IssueID:     commentable.GetID(),
+		Type:        issues_model.CommentTypeComment,
+	})
+	if err != nil {
+		panic(fmt.Errorf("error while listing comment: %v", err))
+	}
+
+	return util.ConvertMap[*issues_model.Comment, *Comment](comments, CommentConverter)
+}
+
+func (o *CommentProvider) ProcessObject(ctx context.Context, user *User, project *Project, commentable common.ContainerObjectInterface, comment *Comment) {
+	if err := comment.LoadIssue(ctx); err != nil {
+		panic(err)
+	}
+	if err := comment.LoadPoster(ctx); err != nil {
+		panic(err)
+	}
+}
+
+func (o *CommentProvider) Get(ctx context.Context, user *User, project *Project, commentable common.ContainerObjectInterface, comment *Comment) *Comment {
+	id := comment.GetID()
+	c, err := issues_model.GetCommentByID(ctx, id)
+	if issues_model.IsErrCommentNotExist(err) {
+		return &Comment{}
+	}
+	if err != nil {
+		panic(err)
+	}
+
+	co := CommentConverter(c)
+	o.ProcessObject(ctx, user, project, commentable, co)
+	return co
+}
+
+func (o *CommentProvider) Put(ctx context.Context, user *User, project *Project, commentable common.ContainerObjectInterface, comment *Comment) *Comment {
+	var issue *issues_model.Issue
+	switch c := commentable.(type) {
+	case *PullRequest:
+		issue = c.PullRequest.Issue
+	case *Issue:
+		issue = &c.Issue
+	default:
+		panic(fmt.Errorf("unexpected type %T", commentable))
+	}
+	c, err := issue_service.CreateIssueComment(ctx, o.g.GetDoer(), &project.Repository, issue, comment.Content, nil)
+	if err != nil {
+		panic(err)
+	}
+	return o.Get(ctx, user, project, commentable, CommentConverter(c))
+}
+
+func (o *CommentProvider) Delete(ctx context.Context, user *User, project *Project, commentable common.ContainerObjectInterface, comment *Comment) *Comment {
+	c := o.Get(ctx, user, project, commentable, comment)
+	if !c.IsNil() {
+		err := issues_model.DeleteComment(ctx, &c.Comment)
+		if err != nil {
+			panic(err)
+		}
+	}
+	return c
+}
--- a/services/f3/driver/driver.go
+++ b/services/f3/driver/driver.go
@ -0,0 +1,113 @@
+// SPDX-License-Identifier: MIT
+
+package driver
+
+import (
+	"fmt"
+
+	user_model "code.gitea.io/gitea/models/user"
+	"code.gitea.io/gitea/modules/setting"
+	"code.gitea.io/gitea/services/migrations"
+
+	"lab.forgefriends.org/friendlyforgeformat/gof3"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/forges/common"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/forges/driver"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/format"
+)
+
+type Options struct {
+	gof3.Options
+
+	AuthenticationSource int64
+	Doer                 *user_model.User
+}
+
+type Forgejo struct {
+	perPage int
+	options *Options
+}
+
+func (o *Forgejo) GetPerPage() int {
+	return o.perPage
+}
+
+func (o *Forgejo) GetOptions() gof3.OptionsInterface {
+	return o.options
+}
+
+func (o *Forgejo) SetOptions(options gof3.OptionsInterface) {
+	var ok bool
+	o.options, ok = options.(*Options)
+	if !ok {
+		panic(fmt.Errorf("unexpected type %T", options))
+	}
+}
+
+func (o *Forgejo) GetLogger() *gof3.Logger {
+	return o.GetOptions().GetLogger()
+}
+
+func (o *Forgejo) Init(options gof3.OptionsInterface) {
+	o.SetOptions(options)
+	o.perPage = setting.ItemsPerPage
+}
+
+func (o *Forgejo) GetDirectory() string {
+	return o.options.GetDirectory()
+}
+
+func (o *Forgejo) GetDoer() *user_model.User {
+	return o.options.Doer
+}
+
+func (o *Forgejo) GetAuthenticationSource() int64 {
+	return o.options.AuthenticationSource
+}
+
+func (o *Forgejo) GetNewMigrationHTTPClient() gof3.NewMigrationHTTPClientFun {
+	return migrations.NewMigrationHTTPClient
+}
+
+func (o *Forgejo) SupportGetRepoComments() bool {
+	return false
+}
+
+func (o *Forgejo) GetProvider(name string, parent common.ProviderInterface) common.ProviderInterface {
+	var parentImpl any
+	if parent != nil {
+		parentImpl = parent.GetImplementation()
+	}
+	switch name {
+	case driver.ProviderUser:
+		return driver.NewProvider[UserProvider, *UserProvider, User, *User, format.User, *format.User](driver.ProviderUser, NewProvider[UserProvider](o))
+	case driver.ProviderProject:
+		return driver.NewProviderWithParentOne[ProjectProvider, *ProjectProvider, Project, *Project, format.Project, *format.Project, User, *User](driver.ProviderProject, NewProvider[ProjectProvider, *ProjectProvider](o))
+	case driver.ProviderMilestone:
+		return driver.NewProviderWithParentOneTwo[MilestoneProvider, *MilestoneProvider, Milestone, *Milestone, format.Milestone, *format.Milestone, User, *User, Project, *Project](driver.ProviderMilestone, NewProviderWithProjectProvider[MilestoneProvider](o, parentImpl.(*ProjectProvider)))
+	case driver.ProviderIssue:
+		return driver.NewProviderWithParentOneTwo[IssueProvider, *IssueProvider, Issue, *Issue, format.Issue, *format.Issue, User, *User, Project, *Project](driver.ProviderIssue, NewProviderWithProjectProvider[IssueProvider](o, parentImpl.(*ProjectProvider)))
+	case driver.ProviderPullRequest:
+		return driver.NewProviderWithParentOneTwo[PullRequestProvider, *PullRequestProvider, PullRequest, *PullRequest, format.PullRequest, *format.PullRequest, User, *User, Project, *Project](driver.ProviderPullRequest, NewProviderWithProjectProvider[PullRequestProvider](o, parentImpl.(*ProjectProvider)))
+	case driver.ProviderReview:
+		return driver.NewProviderWithParentOneTwoThree[ReviewProvider, *ReviewProvider, Review, *Review, format.Review, *format.Review, User, *User, Project, *Project, PullRequest, *PullRequest](driver.ProviderReview, NewProvider[ReviewProvider](o))
+	case driver.ProviderRepository:
+		return driver.NewProviderWithParentOneTwo[RepositoryProvider, *RepositoryProvider, Repository, *Repository, format.Repository, *format.Repository, User, *User, Project, *Project](driver.ProviderRepository, NewProvider[RepositoryProvider](o))
+	case driver.ProviderTopic:
+		return driver.NewProviderWithParentOneTwo[TopicProvider, *TopicProvider, Topic, *Topic, format.Topic, *format.Topic, User, *User, Project, *Project](driver.ProviderTopic, NewProvider[TopicProvider](o))
+	case driver.ProviderLabel:
+		return driver.NewProviderWithParentOneTwo[LabelProvider, *LabelProvider, Label, *Label, format.Label, *format.Label, User, *User, Project, *Project](driver.ProviderLabel, NewProviderWithProjectProvider[LabelProvider](o, parentImpl.(*ProjectProvider)))
+	case driver.ProviderRelease:
+		return driver.NewProviderWithParentOneTwo[ReleaseProvider, *ReleaseProvider, Release, *Release, format.Release, *format.Release, User, *User, Project, *Project](driver.ProviderRelease, NewProvider[ReleaseProvider](o))
+	case driver.ProviderAsset:
+		return driver.NewProviderWithParentOneTwoThree[AssetProvider, *AssetProvider, Asset, *Asset, format.ReleaseAsset, *format.ReleaseAsset, User, *User, Project, *Project, Release, *Release](driver.ProviderAsset, NewProvider[AssetProvider](o))
+	case driver.ProviderComment:
+		return driver.NewProviderWithParentOneTwoThreeInterface[CommentProvider, *CommentProvider, Comment, *Comment, format.Comment, *format.Comment, User, *User, Project, *Project](driver.ProviderComment, NewProvider[CommentProvider](o))
+	case driver.ProviderReaction:
+		return driver.NewProviderWithParentOneTwoRest[ReactionProvider, *ReactionProvider, Reaction, *Reaction, format.Reaction, *format.Reaction, User, *User, Project, *Project](driver.ProviderReaction, NewProvider[ReactionProvider](o))
+	default:
+		panic(fmt.Sprintf("unknown provider name %s", name))
+	}
+}
+
+func (o Forgejo) Finish() {
+}
--- a/services/f3/driver/issue.go
+++ b/services/f3/driver/issue.go
@ -0,0 +1,207 @@
+// SPDX-License-Identifier: MIT
+
+package driver
+
+import (
+	"context"
+	"fmt"
+
+	"code.gitea.io/gitea/models/db"
+	issues_model "code.gitea.io/gitea/models/issues"
+	repo_model "code.gitea.io/gitea/models/repo"
+	user_model "code.gitea.io/gitea/models/user"
+	"code.gitea.io/gitea/modules/git"
+	"code.gitea.io/gitea/modules/timeutil"
+	issue_service "code.gitea.io/gitea/services/issue"
+
+	"lab.forgefriends.org/friendlyforgeformat/gof3/format"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/util"
+)
+
+type Issue struct {
+	issues_model.Issue
+}
+
+func IssueConverter(f *issues_model.Issue) *Issue {
+	return &Issue{
+		Issue: *f,
+	}
+}
+
+func (o Issue) GetID() int64 {
+	return o.Index
+}
+
+func (o Issue) GetIDString() string {
+	return fmt.Sprintf("%d", o.GetID())
+}
+
+func (o *Issue) SetID(id int64) {
+	o.Index = id
+}
+
+func (o *Issue) SetIDString(id string) {
+	o.SetID(util.ParseInt(id))
+}
+
+func (o *Issue) IsNil() bool {
+	return o.Index == 0
+}
+
+func (o *Issue) Equals(other *Issue) bool {
+	return o.Index == other.Index
+}
+
+func (o *Issue) ToFormatInterface() format.Interface {
+	return o.ToFormat()
+}
+
+func (o *Issue) ToFormat() *format.Issue {
+	var milestone string
+	if o.Milestone != nil {
+		milestone = o.Milestone.Name
+	}
+
+	labels := make([]string, 0, len(o.Labels))
+	for _, label := range o.Labels {
+		labels = append(labels, label.Name)
+	}
+
+	var assignees []string
+	for i := range o.Assignees {
+		assignees = append(assignees, o.Assignees[i].Name)
+	}
+
+	return &format.Issue{
+		Common:    format.NewCommon(o.Index),
+		Title:     o.Title,
+		PosterID:  format.NewUserReference(o.Poster.ID),
+		Content:   o.Content,
+		Milestone: milestone,
+		State:     string(o.State()),
+		Created:   o.CreatedUnix.AsTime(),
+		Updated:   o.UpdatedUnix.AsTime(),
+		Closed:    o.ClosedUnix.AsTimePtr(),
+		IsLocked:  o.IsLocked,
+		Labels:    labels,
+		Assignees: assignees,
+	}
+}
+
+func (o *Issue) FromFormat(issue *format.Issue) {
+	labels := make([]*issues_model.Label, 0, len(issue.Labels))
+	for _, label := range issue.Labels {
+		labels = append(labels, &issues_model.Label{Name: label})
+	}
+
+	assignees := make([]*user_model.User, 0, len(issue.Assignees))
+	for _, a := range issue.Assignees {
+		assignees = append(assignees, &user_model.User{
+			Name: a,
+		})
+	}
+
+	*o = Issue{
+		Issue: issues_model.Issue{
+			Title:    issue.Title,
+			Index:    issue.GetID(),
+			PosterID: issue.PosterID.GetID(),
+			Poster: &user_model.User{
+				ID: issue.PosterID.GetID(),
+			},
+			Content: issue.Content,
+			Milestone: &issues_model.Milestone{
+				Name: issue.Milestone,
+			},
+			IsClosed:    issue.State == "closed",
+			CreatedUnix: timeutil.TimeStamp(issue.Created.Unix()),
+			UpdatedUnix: timeutil.TimeStamp(issue.Updated.Unix()),
+			ClosedUnix:  timeutil.TimeStamp(issue.Closed.Unix()),
+			IsLocked:    issue.IsLocked,
+			Labels:      labels,
+			Assignees:   assignees,
+		},
+	}
+}
+
+type IssueProvider struct {
+	BaseProviderWithProjectProvider
+}
+
+func (o *IssueProvider) ToFormat(ctx context.Context, issue *Issue) *format.Issue {
+	return issue.ToFormat()
+}
+
+func (o *IssueProvider) FromFormat(ctx context.Context, i *format.Issue) *Issue {
+	var issue Issue
+	issue.FromFormat(i)
+	if i.Milestone != "" {
+		issue.Milestone.ID = o.project.milestones.GetID(issue.Milestone.Name)
+	}
+	for _, label := range issue.Labels {
+		label.ID = o.project.labels.GetID(label.Name)
+	}
+	return &issue
+}
+
+func (o *IssueProvider) GetObjects(ctx context.Context, user *User, project *Project, page int) []*Issue {
+	issues, err := issues_model.Issues(ctx, &issues_model.IssuesOptions{
+		ListOptions: db.ListOptions{Page: page, PageSize: o.g.perPage},
+		RepoIDs:     []int64{project.GetID()},
+	})
+	if err != nil {
+		panic(fmt.Errorf("error while listing issues: %v", err))
+	}
+
+	return util.ConvertMap[*issues_model.Issue, *Issue](issues, IssueConverter)
+}
+
+func (o *IssueProvider) ProcessObject(ctx context.Context, user *User, project *Project, issue *Issue) {
+	if err := (&issue.Issue).LoadAttributes(ctx); err != nil {
+		panic(true)
+	}
+}
+
+func (o *IssueProvider) Get(ctx context.Context, user *User, project *Project, exemplar *Issue) *Issue {
+	id := exemplar.GetID()
+	issue, err := issues_model.GetIssueByIndex(project.GetID(), id)
+	if issues_model.IsErrIssueNotExist(err) {
+		return &Issue{}
+	}
+	if err != nil {
+		panic(err)
+	}
+	i := IssueConverter(issue)
+	o.ProcessObject(ctx, user, project, i)
+	return i
+}
+
+func (o *IssueProvider) Put(ctx context.Context, user *User, project *Project, issue *Issue) *Issue {
+	i := issue.Issue
+	i.RepoID = project.GetID()
+	labels := make([]int64, 0, len(i.Labels))
+	for _, label := range i.Labels {
+		labels = append(labels, label.ID)
+	}
+
+	if err := issues_model.NewIssue(&project.Repository, &i, labels, []string{}); err != nil {
+		panic(err)
+	}
+	return o.Get(ctx, user, project, IssueConverter(&i))
+}
+
+func (o *IssueProvider) Delete(ctx context.Context, user *User, project *Project, issue *Issue) *Issue {
+	m := o.Get(ctx, user, project, issue)
+	if !m.IsNil() {
+		repoPath := repo_model.RepoPath(user.Name, project.Name)
+		gitRepo, err := git.OpenRepository(ctx, repoPath)
+		if err != nil {
+			panic(err)
+		}
+		defer gitRepo.Close()
+		if err := issue_service.DeleteIssue(ctx, o.g.GetDoer(), gitRepo, &issue.Issue); err != nil {
+			panic(err)
+		}
+	}
+	return m
+}
--- a/services/f3/driver/label.go
+++ b/services/f3/driver/label.go
@ -0,0 +1,137 @@
+// SPDX-License-Identifier: MIT
+
+package driver
+
+import (
+	"context"
+	"fmt"
+
+	"code.gitea.io/gitea/models/db"
+	issues_model "code.gitea.io/gitea/models/issues"
+
+	"lab.forgefriends.org/friendlyforgeformat/gof3/format"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/util"
+)
+
+type Label struct {
+	issues_model.Label
+}
+
+func LabelConverter(f *issues_model.Label) *Label {
+	return &Label{
+		Label: *f,
+	}
+}
+
+func (o Label) GetID() int64 {
+	return o.ID
+}
+
+func (o Label) GetIDString() string {
+	return fmt.Sprintf("%d", o.GetID())
+}
+
+func (o Label) GetName() string {
+	return o.Name
+}
+
+func (o *Label) SetID(id int64) {
+	o.ID = id
+}
+
+func (o *Label) SetIDString(id string) {
+	o.SetID(util.ParseInt(id))
+}
+
+func (o *Label) IsNil() bool {
+	return o.ID == 0
+}
+
+func (o *Label) Equals(other *Label) bool {
+	return o.Name == other.Name
+}
+
+func (o *Label) ToFormatInterface() format.Interface {
+	return o.ToFormat()
+}
+
+func (o *Label) ToFormat() *format.Label {
+	return &format.Label{
+		Common:      format.NewCommon(o.ID),
+		Name:        o.Name,
+		Color:       o.Color,
+		Description: o.Description,
+	}
+}
+
+func (o *Label) FromFormat(label *format.Label) {
+	*o = Label{
+		Label: issues_model.Label{
+			ID:          label.GetID(),
+			Name:        label.Name,
+			Description: label.Description,
+			Color:       label.Color,
+		},
+	}
+}
+
+type LabelProvider struct {
+	BaseProviderWithProjectProvider
+}
+
+func (o *LabelProvider) ToFormat(ctx context.Context, label *Label) *format.Label {
+	return label.ToFormat()
+}
+
+func (o *LabelProvider) FromFormat(ctx context.Context, m *format.Label) *Label {
+	var label Label
+	label.FromFormat(m)
+	return &label
+}
+
+func (o *LabelProvider) GetObjects(ctx context.Context, user *User, project *Project, page int) []*Label {
+	labels, err := issues_model.GetLabelsByRepoID(ctx, project.GetID(), "", db.ListOptions{Page: page, PageSize: o.g.perPage})
+	if err != nil {
+		panic(fmt.Errorf("error while listing labels: %v", err))
+	}
+
+	r := util.ConvertMap[*issues_model.Label, *Label](labels, LabelConverter)
+	if o.project != nil {
+		o.project.labels = util.NewNameIDMap[*Label](r)
+	}
+	return r
+}
+
+func (o *LabelProvider) ProcessObject(ctx context.Context, user *User, project *Project, label *Label) {
+}
+
+func (o *LabelProvider) Get(ctx context.Context, user *User, project *Project, exemplar *Label) *Label {
+	id := exemplar.GetID()
+	label, err := issues_model.GetLabelInRepoByID(ctx, project.GetID(), id)
+	if issues_model.IsErrRepoLabelNotExist(err) {
+		return &Label{}
+	}
+	if err != nil {
+		panic(err)
+	}
+	return LabelConverter(label)
+}
+
+func (o *LabelProvider) Put(ctx context.Context, user *User, project *Project, label *Label) *Label {
+	l := label.Label
+	l.RepoID = project.GetID()
+	if err := issues_model.NewLabel(ctx, &l); err != nil {
+		panic(err)
+	}
+	return o.Get(ctx, user, project, LabelConverter(&l))
+}
+
+func (o *LabelProvider) Delete(ctx context.Context, user *User, project *Project, label *Label) *Label {
+	l := o.Get(ctx, user, project, label)
+	if !l.IsNil() {
+		if err := issues_model.DeleteLabel(project.GetID(), l.GetID()); err != nil {
+			panic(err)
+		}
+	}
+	return l
+}
--- a/services/f3/driver/milestone.go
+++ b/services/f3/driver/milestone.go
@ -0,0 +1,184 @@
+// SPDX-License-Identifier: MIT
+
+package driver
+
+import (
+	"context"
+	"fmt"
+	"time"
+
+	"code.gitea.io/gitea/models/db"
+	issues_model "code.gitea.io/gitea/models/issues"
+	"code.gitea.io/gitea/modules/setting"
+	api "code.gitea.io/gitea/modules/structs"
+	"code.gitea.io/gitea/modules/timeutil"
+
+	"lab.forgefriends.org/friendlyforgeformat/gof3/format"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/util"
+)
+
+type Milestone struct {
+	issues_model.Milestone
+}
+
+func MilestoneConverter(f *issues_model.Milestone) *Milestone {
+	return &Milestone{
+		Milestone: *f,
+	}
+}
+
+func (o Milestone) GetID() int64 {
+	return o.ID
+}
+
+func (o Milestone) GetIDString() string {
+	return fmt.Sprintf("%d", o.GetID())
+}
+
+func (o Milestone) GetName() string {
+	return o.Name
+}
+
+func (o *Milestone) SetID(id int64) {
+	o.ID = id
+}
+
+func (o *Milestone) SetIDString(id string) {
+	o.SetID(util.ParseInt(id))
+}
+
+func (o *Milestone) IsNil() bool {
+	return o.ID == 0
+}
+
+func (o *Milestone) Equals(other *Milestone) bool {
+	return o.Name == other.Name
+}
+
+func (o *Milestone) ToFormatInterface() format.Interface {
+	return o.ToFormat()
+}
+
+func (o *Milestone) ToFormat() *format.Milestone {
+	milestone := &format.Milestone{
+		Common:      format.NewCommon(o.ID),
+		Title:       o.Name,
+		Description: o.Content,
+		Created:     o.CreatedUnix.AsTime(),
+		Updated:     o.UpdatedUnix.AsTimePtr(),
+		State:       string(o.State()),
+	}
+	if o.IsClosed {
+		milestone.Closed = o.ClosedDateUnix.AsTimePtr()
+	}
+	if o.DeadlineUnix.Year() < 9999 {
+		milestone.Deadline = o.DeadlineUnix.AsTimePtr()
+	}
+	return milestone
+}
+
+func (o *Milestone) FromFormat(milestone *format.Milestone) {
+	var deadline timeutil.TimeStamp
+	if milestone.Deadline != nil {
+		deadline = timeutil.TimeStamp(milestone.Deadline.Unix())
+	}
+	if deadline == 0 {
+		deadline = timeutil.TimeStamp(time.Date(9999, 1, 1, 0, 0, 0, 0, setting.DefaultUILocation).Unix())
+	}
+
+	var closed timeutil.TimeStamp
+	if milestone.Closed != nil {
+		closed = timeutil.TimeStamp(milestone.Closed.Unix())
+	}
+
+	if milestone.Created.IsZero() {
+		if milestone.Updated != nil {
+			milestone.Created = *milestone.Updated
+		} else if milestone.Deadline != nil {
+			milestone.Created = *milestone.Deadline
+		} else {
+			milestone.Created = time.Now()
+		}
+	}
+	if milestone.Updated == nil || milestone.Updated.IsZero() {
+		milestone.Updated = &milestone.Created
+	}
+
+	*o = Milestone{
+		issues_model.Milestone{
+			ID:             milestone.GetID(),
+			Name:           milestone.Title,
+			Content:        milestone.Description,
+			IsClosed:       milestone.State == "closed",
+			CreatedUnix:    timeutil.TimeStamp(milestone.Created.Unix()),
+			UpdatedUnix:    timeutil.TimeStamp(milestone.Updated.Unix()),
+			ClosedDateUnix: closed,
+			DeadlineUnix:   deadline,
+		},
+	}
+}
+
+type MilestoneProvider struct {
+	BaseProviderWithProjectProvider
+}
+
+func (o *MilestoneProvider) ToFormat(ctx context.Context, milestone *Milestone) *format.Milestone {
+	return milestone.ToFormat()
+}
+
+func (o *MilestoneProvider) FromFormat(ctx context.Context, m *format.Milestone) *Milestone {
+	var milestone Milestone
+	milestone.FromFormat(m)
+	return &milestone
+}
+
+func (o *MilestoneProvider) GetObjects(ctx context.Context, user *User, project *Project, page int) []*Milestone {
+	milestones, _, err := issues_model.GetMilestones(issues_model.GetMilestonesOption{
+		ListOptions: db.ListOptions{Page: page, PageSize: o.g.perPage},
+		RepoID:      project.GetID(),
+		State:       api.StateAll,
+	})
+	if err != nil {
+		panic(fmt.Errorf("error while listing milestones: %v", err))
+	}
+
+	r := util.ConvertMap[*issues_model.Milestone, *Milestone](([]*issues_model.Milestone)(milestones), MilestoneConverter)
+	if o.project != nil {
+		o.project.milestones = util.NewNameIDMap[*Milestone](r)
+	}
+	return r
+}
+
+func (o *MilestoneProvider) ProcessObject(ctx context.Context, user *User, project *Project, milestone *Milestone) {
+}
+
+func (o *MilestoneProvider) Get(ctx context.Context, user *User, project *Project, exemplar *Milestone) *Milestone {
+	id := exemplar.GetID()
+	milestone, err := issues_model.GetMilestoneByRepoID(ctx, project.GetID(), id)
+	if issues_model.IsErrMilestoneNotExist(err) {
+		return &Milestone{}
+	}
+	if err != nil {
+		panic(err)
+	}
+	return MilestoneConverter(milestone)
+}
+
+func (o *MilestoneProvider) Put(ctx context.Context, user *User, project *Project, milestone *Milestone) *Milestone {
+	m := milestone.Milestone
+	m.RepoID = project.GetID()
+	if err := issues_model.NewMilestone(&m); err != nil {
+		panic(err)
+	}
+	return o.Get(ctx, user, project, MilestoneConverter(&m))
+}
+
+func (o *MilestoneProvider) Delete(ctx context.Context, user *User, project *Project, milestone *Milestone) *Milestone {
+	m := o.Get(ctx, user, project, milestone)
+	if !m.IsNil() {
+		if err := issues_model.DeleteMilestoneByRepoID(project.GetID(), m.GetID()); err != nil {
+			panic(err)
+		}
+	}
+	return m
+}
--- a/services/f3/driver/project.go
+++ b/services/f3/driver/project.go
@ -0,0 +1,169 @@
+// SPDX-License-Identifier: MIT
+
+package driver
+
+import (
+	"context"
+	"fmt"
+
+	"code.gitea.io/gitea/models/db"
+	repo_model "code.gitea.io/gitea/models/repo"
+	user_model "code.gitea.io/gitea/models/user"
+	repo_module "code.gitea.io/gitea/modules/repository"
+	repo_service "code.gitea.io/gitea/services/repository"
+
+	"lab.forgefriends.org/friendlyforgeformat/gof3/format"
+	f3_util "lab.forgefriends.org/friendlyforgeformat/gof3/util"
+)
+
+type Project struct {
+	repo_model.Repository
+}
+
+func ProjectConverter(f *repo_model.Repository) *Project {
+	return &Project{
+		Repository: *f,
+	}
+}
+
+func (o Project) GetID() int64 {
+	return o.ID
+}
+
+func (o Project) GetIDString() string {
+	return fmt.Sprintf("%d", o.GetID())
+}
+
+func (o *Project) SetID(id int64) {
+	o.ID = id
+}
+
+func (o *Project) SetIDString(id string) {
+	o.SetID(f3_util.ParseInt(id))
+}
+
+func (o *Project) IsNil() bool {
+	return o.ID == 0
+}
+
+func (o *Project) Equals(other *Project) bool {
+	return (o.Name == other.Name)
+}
+
+func (o *Project) ToFormatInterface() format.Interface {
+	return o.ToFormat()
+}
+
+func (o *Project) ToFormat() *format.Project {
+	return &format.Project{
+		Common:        format.NewCommon(o.ID),
+		Name:          o.Name,
+		Owner:         o.Owner.Name,
+		IsPrivate:     o.IsPrivate,
+		Description:   o.Description,
+		CloneURL:      repo_model.ComposeHTTPSCloneURL(o.Owner.Name, o.Name),
+		OriginalURL:   o.OriginalURL,
+		DefaultBranch: o.DefaultBranch,
+	}
+}
+
+func (o *Project) FromFormat(project *format.Project) {
+	*o = Project{
+		Repository: repo_model.Repository{
+			ID:   project.GetID(),
+			Name: project.Name,
+			Owner: &user_model.User{
+				Name: project.Owner,
+			},
+			IsPrivate:     project.IsPrivate,
+			Description:   project.Description,
+			OriginalURL:   project.OriginalURL,
+			DefaultBranch: project.DefaultBranch,
+		},
+	}
+}
+
+type ProjectProvider struct {
+	BaseProvider
+	milestones f3_util.NameIDMap
+	labels     f3_util.NameIDMap
+}
+
+func (o *ProjectProvider) ToFormat(ctx context.Context, project *Project) *format.Project {
+	return project.ToFormat()
+}
+
+func (o *ProjectProvider) FromFormat(ctx context.Context, p *format.Project) *Project {
+	var project Project
+	project.FromFormat(p)
+	return &project
+}
+
+func (o *ProjectProvider) GetObjects(ctx context.Context, user *User, page int) []*Project {
+	repoList, _, err := repo_model.GetUserRepositories(&repo_model.SearchRepoOptions{
+		ListOptions: db.ListOptions{Page: page, PageSize: o.g.perPage},
+		Actor:       &user.User,
+		Private:     true,
+	})
+	if err != nil {
+		panic(fmt.Errorf("error while listing projects: %T %v", err, err))
+	}
+	if err := repoList.LoadAttributes(ctx); err != nil {
+		panic(nil)
+	}
+	return f3_util.ConvertMap[*repo_model.Repository, *Project](([]*repo_model.Repository)(repoList), ProjectConverter)
+}
+
+func (o *ProjectProvider) ProcessObject(ctx context.Context, user *User, project *Project) {
+}
+
+func (o *ProjectProvider) Get(ctx context.Context, user *User, exemplar *Project) *Project {
+	var project *repo_model.Repository
+	var err error
+	if exemplar.GetID() > 0 {
+		project, err = repo_model.GetRepositoryByID(ctx, exemplar.GetID())
+	} else if exemplar.Name != "" {
+		project, err = repo_model.GetRepositoryByName(user.GetID(), exemplar.Name)
+	} else {
+		panic("GetID() == 0 and ProjectName == \"\"")
+	}
+	if repo_model.IsErrRepoNotExist(err) {
+		return &Project{}
+	}
+	if err != nil {
+		panic(fmt.Errorf("project %v %w", exemplar, err))
+	}
+	if err := project.LoadOwner(ctx); err != nil {
+		panic(err)
+	}
+	return ProjectConverter(project)
+}
+
+func (o *ProjectProvider) Put(ctx context.Context, user *User, project *Project) *Project {
+	repo, err := repo_module.CreateRepository(o.g.GetDoer(), &user.User, repo_module.CreateRepoOptions{
+		Name:        project.Name,
+		Description: project.Description,
+		OriginalURL: project.OriginalURL,
+		IsPrivate:   project.IsPrivate,
+	})
+	if err != nil {
+		panic(err)
+	}
+	return o.Get(ctx, user, ProjectConverter(repo))
+}
+
+func (o *ProjectProvider) Delete(ctx context.Context, user *User, project *Project) *Project {
+	if project.IsNil() {
+		return project
+	}
+	if project.ID > 0 {
+		project = o.Get(ctx, user, project)
+	}
+	if !project.IsNil() {
+		err := repo_service.DeleteRepository(ctx, o.g.GetDoer(), &project.Repository, true)
+		if err != nil {
+			panic(err)
+		}
+	}
+	return project
+}
--- a/services/f3/driver/pull_request.go
+++ b/services/f3/driver/pull_request.go
@ -0,0 +1,320 @@
+// SPDX-License-Identifier: MIT
+
+package driver
+
+import (
+	"context"
+	"fmt"
+	"time"
+
+	"code.gitea.io/gitea/models/db"
+	issues_model "code.gitea.io/gitea/models/issues"
+	repo_model "code.gitea.io/gitea/models/repo"
+	"code.gitea.io/gitea/modules/git"
+	api "code.gitea.io/gitea/modules/structs"
+	"code.gitea.io/gitea/modules/timeutil"
+	issue_service "code.gitea.io/gitea/services/issue"
+
+	f3_forgejo "lab.forgefriends.org/friendlyforgeformat/gof3/forges/forgejo"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/format"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/util"
+)
+
+type PullRequest struct {
+	issues_model.PullRequest
+	FetchFunc func(repository string) string
+}
+
+func PullRequestConverter(f *issues_model.PullRequest) *PullRequest {
+	return &PullRequest{
+		PullRequest: *f,
+	}
+}
+
+func (o PullRequest) GetID() int64 {
+	return o.Index
+}
+
+func (o PullRequest) GetIDString() string {
+	return fmt.Sprintf("%d", o.GetID())
+}
+
+func (o *PullRequest) SetID(id int64) {
+	o.Index = id
+}
+
+func (o *PullRequest) SetIDString(id string) {
+	o.SetID(util.ParseInt(id))
+}
+
+func (o *PullRequest) IsNil() bool {
+	return o.Index == 0
+}
+
+func (o *PullRequest) Equals(other *PullRequest) bool {
+	return o.Issue.Title == other.Issue.Title
+}
+
+func (o PullRequest) IsForkPullRequest() bool {
+	return o.HeadRepoID != o.BaseRepoID
+}
+
+func (o *PullRequest) ToFormatInterface() format.Interface {
+	return o.ToFormat()
+}
+
+func (o *PullRequest) ToFormat() *format.PullRequest {
+	var milestone string
+	if o.Issue.Milestone != nil {
+		milestone = o.Issue.Milestone.Name
+	}
+
+	labels := make([]string, 0, len(o.Issue.Labels))
+	for _, label := range o.Issue.Labels {
+		labels = append(labels, label.Name)
+	}
+
+	var mergedTime *time.Time
+	if o.HasMerged {
+		mergedTime = o.MergedUnix.AsTimePtr()
+	}
+
+	getSHA := func(repo *repo_model.Repository, branch string) string {
+		r, err := git.OpenRepository(context.Background(), repo.RepoPath())
+		if err != nil {
+			panic(err)
+		}
+		defer r.Close()
+
+		b, err := r.GetBranch(branch)
+		if err != nil {
+			panic(err)
+		}
+
+		c, err := b.GetCommit()
+		if err != nil {
+			panic(err)
+		}
+		return c.ID.String()
+	}
+
+	head := format.PullRequestBranch{
+		CloneURL:  o.HeadRepo.CloneLink().HTTPS,
+		Ref:       o.HeadBranch,
+		SHA:       getSHA(o.HeadRepo, o.HeadBranch),
+		RepoName:  o.HeadRepo.Name,
+		OwnerName: o.HeadRepo.OwnerName,
+	}
+
+	base := format.PullRequestBranch{
+		CloneURL:  o.BaseRepo.CloneLink().HTTPS,
+		Ref:       o.BaseBranch,
+		SHA:       getSHA(o.BaseRepo, o.BaseBranch),
+		RepoName:  o.BaseRepo.Name,
+		OwnerName: o.BaseRepo.OwnerName,
+	}
+
+	return &format.PullRequest{
+		Common:         format.NewCommon(o.Index),
+		PosterID:       format.NewUserReference(o.Issue.Poster.ID),
+		Title:          o.Issue.Title,
+		Content:        o.Issue.Content,
+		Milestone:      milestone,
+		State:          string(o.Issue.State()),
+		IsLocked:       o.Issue.IsLocked,
+		Created:        o.Issue.CreatedUnix.AsTime(),
+		Updated:        o.Issue.UpdatedUnix.AsTime(),
+		Closed:         o.Issue.ClosedUnix.AsTimePtr(),
+		Labels:         labels,
+		PatchURL:       o.Issue.PatchURL(),
+		Merged:         o.HasMerged,
+		MergedTime:     mergedTime,
+		MergeCommitSHA: o.MergedCommitID,
+		Head:           head,
+		Base:           base,
+	}
+}
+
+func (o *PullRequest) FromFormat(pullRequest *format.PullRequest) {
+	labels := make([]*issues_model.Label, 0, len(pullRequest.Labels))
+	for _, label := range pullRequest.Labels {
+		labels = append(labels, &issues_model.Label{Name: label})
+	}
+
+	if pullRequest.Created.IsZero() {
+		if pullRequest.Closed != nil {
+			pullRequest.Created = *pullRequest.Closed
+		} else if pullRequest.MergedTime != nil {
+			pullRequest.Created = *pullRequest.MergedTime
+		} else {
+			pullRequest.Created = time.Now()
+		}
+	}
+	if pullRequest.Updated.IsZero() {
+		pullRequest.Updated = pullRequest.Created
+	}
+
+	ctx := context.Background()
+	base, err := repo_model.GetRepositoryByOwnerAndName(ctx, pullRequest.Base.OwnerName, pullRequest.Base.RepoName)
+	if err != nil {
+		panic(err)
+	}
+	var head *repo_model.Repository
+	if pullRequest.Head.RepoName == "" {
+		head = base
+	} else {
+		head, err = repo_model.GetRepositoryByOwnerAndName(ctx, pullRequest.Head.OwnerName, pullRequest.Head.RepoName)
+		if err != nil {
+			panic(err)
+		}
+	}
+
+	issue := issues_model.Issue{
+		RepoID:      base.ID,
+		Repo:        base,
+		Title:       pullRequest.Title,
+		Index:       pullRequest.GetID(),
+		PosterID:    pullRequest.PosterID.GetID(),
+		Content:     pullRequest.Content,
+		IsPull:      true,
+		IsClosed:    pullRequest.State == "closed",
+		IsLocked:    pullRequest.IsLocked,
+		Labels:      labels,
+		CreatedUnix: timeutil.TimeStamp(pullRequest.Created.Unix()),
+		UpdatedUnix: timeutil.TimeStamp(pullRequest.Updated.Unix()),
+	}
+
+	pr := issues_model.PullRequest{
+		HeadRepoID: head.ID,
+		HeadBranch: pullRequest.Head.Ref,
+		BaseRepoID: base.ID,
+		BaseBranch: pullRequest.Base.Ref,
+		MergeBase:  pullRequest.Base.SHA,
+		Index:      pullRequest.GetID(),
+		HasMerged:  pullRequest.Merged,
+
+		Issue: &issue,
+	}
+
+	if pr.Issue.IsClosed && pullRequest.Closed != nil {
+		pr.Issue.ClosedUnix = timeutil.TimeStamp(pullRequest.Closed.Unix())
+	}
+	if pr.HasMerged && pullRequest.MergedTime != nil {
+		pr.MergedUnix = timeutil.TimeStamp(pullRequest.MergedTime.Unix())
+		pr.MergedCommitID = pullRequest.MergeCommitSHA
+	}
+
+	*o = PullRequest{
+		PullRequest: pr,
+	}
+}
+
+type PullRequestProvider struct {
+	BaseProviderWithProjectProvider
+	prHeadCache f3_forgejo.PrHeadCache
+}
+
+func (o *PullRequestProvider) ToFormat(ctx context.Context, pullRequest *PullRequest) *format.PullRequest {
+	return pullRequest.ToFormat()
+}
+
+func (o *PullRequestProvider) FromFormat(ctx context.Context, pr *format.PullRequest) *PullRequest {
+	var pullRequest PullRequest
+	pullRequest.FromFormat(pr)
+	return &pullRequest
+}
+
+func (o *PullRequestProvider) Init() *PullRequestProvider {
+	o.prHeadCache = make(f3_forgejo.PrHeadCache)
+	return o
+}
+
+func (o *PullRequestProvider) cleanupRemotes(ctx context.Context, repository string) {
+	for remote := range o.prHeadCache {
+		util.Command(ctx, "git", "-C", repository, "remote", "rm", remote)
+	}
+	o.prHeadCache = make(f3_forgejo.PrHeadCache)
+}
+
+func (o *PullRequestProvider) GetObjects(ctx context.Context, user *User, project *Project, page int) []*PullRequest {
+	pullRequests, _, err := issues_model.PullRequests(project.GetID(), &issues_model.PullRequestsOptions{
+		ListOptions: db.ListOptions{Page: page, PageSize: o.g.perPage},
+		State:       string(api.StateAll),
+	})
+	if err != nil {
+		panic(fmt.Errorf("error while listing pullRequests: %v", err))
+	}
+
+	return util.ConvertMap[*issues_model.PullRequest, *PullRequest](pullRequests, PullRequestConverter)
+}
+
+func (o *PullRequestProvider) ProcessObject(ctx context.Context, user *User, project *Project, pr *PullRequest) {
+	if err := pr.LoadIssue(ctx); err != nil {
+		panic(err)
+	}
+	if err := pr.Issue.LoadRepo(ctx); err != nil {
+		panic(err)
+	}
+	if err := pr.LoadAttributes(ctx); err != nil {
+		panic(err)
+	}
+	if err := pr.LoadBaseRepo(ctx); err != nil {
+		panic(err)
+	}
+	if err := pr.LoadHeadRepo(ctx); err != nil {
+		panic(err)
+	}
+
+	pr.FetchFunc = func(repository string) string {
+		head, messages := f3_forgejo.UpdateGitForPullRequest(ctx, &o.prHeadCache, pr.ToFormat(), repository)
+		for _, message := range messages {
+			o.g.GetLogger().Warn(message)
+		}
+		o.cleanupRemotes(ctx, repository)
+		return head
+	}
+}
+
+func (o *PullRequestProvider) Get(ctx context.Context, user *User, project *Project, pullRequest *PullRequest) *PullRequest {
+	id := pullRequest.GetID()
+	pr, err := issues_model.GetPullRequestByIndex(ctx, project.GetID(), id)
+	if issues_model.IsErrPullRequestNotExist(err) {
+		return &PullRequest{}
+	}
+	if err != nil {
+		panic(err)
+	}
+	p := PullRequestConverter(pr)
+	o.ProcessObject(ctx, user, project, p)
+	return p
+}
+
+func (o *PullRequestProvider) Put(ctx context.Context, user *User, project *Project, pullRequest *PullRequest) *PullRequest {
+	i := pullRequest.PullRequest.Issue
+	i.RepoID = project.GetID()
+	labels := make([]int64, 0, len(i.Labels))
+	for _, label := range i.Labels {
+		labels = append(labels, label.ID)
+	}
+
+	if err := issues_model.NewPullRequest(ctx, &project.Repository, i, labels, []string{}, &pullRequest.PullRequest); err != nil {
+		panic(err)
+	}
+	return o.Get(ctx, user, project, pullRequest)
+}
+
+func (o *PullRequestProvider) Delete(ctx context.Context, user *User, project *Project, pullRequest *PullRequest) *PullRequest {
+	p := o.Get(ctx, user, project, pullRequest)
+	if !p.IsNil() {
+		repoPath := repo_model.RepoPath(user.Name, project.Name)
+		gitRepo, err := git.OpenRepository(ctx, repoPath)
+		if err != nil {
+			panic(err)
+		}
+		defer gitRepo.Close()
+		if err := issue_service.DeleteIssue(ctx, o.g.GetDoer(), gitRepo, p.PullRequest.Issue); err != nil {
+			panic(err)
+		}
+	}
+	return p
+}
--- a/services/f3/driver/reaction.go
+++ b/services/f3/driver/reaction.go
@ -0,0 +1,187 @@
+// SPDX-License-Identifier: MIT
+
+package driver
+
+import (
+	"context"
+	"fmt"
+
+	"code.gitea.io/gitea/models/db"
+	issues_model "code.gitea.io/gitea/models/issues"
+	user_model "code.gitea.io/gitea/models/user"
+
+	"lab.forgefriends.org/friendlyforgeformat/gof3/forges/common"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/format"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/util"
+	"xorm.io/builder"
+)
+
+type Reaction struct {
+	issues_model.Reaction
+}
+
+func ReactionConverter(f *issues_model.Reaction) *Reaction {
+	return &Reaction{
+		Reaction: *f,
+	}
+}
+
+func (o Reaction) GetID() int64 {
+	return o.ID
+}
+
+func (o Reaction) GetIDString() string {
+	return fmt.Sprintf("%d", o.GetID())
+}
+
+func (o *Reaction) SetID(id int64) {
+	o.ID = id
+}
+
+func (o *Reaction) SetIDString(id string) {
+	o.SetID(util.ParseInt(id))
+}
+
+func (o *Reaction) IsNil() bool {
+	return o.ID == 0
+}
+
+func (o *Reaction) Equals(other *Reaction) bool {
+	return o.UserID == other.UserID && o.Type == other.Type
+}
+
+func (o *Reaction) ToFormatInterface() format.Interface {
+	return o.ToFormat()
+}
+
+func (o *Reaction) ToFormat() *format.Reaction {
+	return &format.Reaction{
+		Common:  format.NewCommon(o.ID),
+		UserID:  format.NewUserReference(o.User.ID),
+		Content: o.Type,
+	}
+}
+
+func (o *Reaction) FromFormat(reaction *format.Reaction) {
+	*o = Reaction{
+		Reaction: issues_model.Reaction{
+			ID:     reaction.GetID(),
+			UserID: reaction.UserID.GetID(),
+			User: &user_model.User{
+				ID: reaction.UserID.GetID(),
+			},
+			Type: reaction.Content,
+		},
+	}
+}
+
+type ReactionProvider struct {
+	BaseProvider
+}
+
+func (o *ReactionProvider) ToFormat(ctx context.Context, reaction *Reaction) *format.Reaction {
+	return reaction.ToFormat()
+}
+
+func (o *ReactionProvider) FromFormat(ctx context.Context, m *format.Reaction) *Reaction {
+	var reaction Reaction
+	reaction.FromFormat(m)
+	return &reaction
+}
+
+//
+// Although it would be possible to use a higher level logic instead of the database,
+// as of September 2022 (1.18 dev)
+// (i) models/issues/reaction.go imposes a significant overhead
+// (ii) is fragile and bugous https://github.com/go-gitea/gitea/issues/20860
+//
+
+func (o *ReactionProvider) GetObjects(ctx context.Context, user *User, project *Project, parents []common.ContainerObjectInterface, page int) []*Reaction {
+	cond := builder.NewCond()
+	switch l := parents[len(parents)-1].(type) {
+	case *Issue:
+		cond = cond.And(builder.Eq{"reaction.issue_id": l.ID})
+		cond = cond.And(builder.Eq{"reaction.comment_id": 0})
+	case *Comment:
+		cond = cond.And(builder.Eq{"reaction.comment_id": l.ID})
+	default:
+		panic(fmt.Errorf("unexpected type %T", parents[len(parents)-1]))
+	}
+	sess := db.GetEngine(ctx).Where(cond)
+	if page > 0 {
+		sess = db.SetSessionPagination(sess, &db.ListOptions{Page: page, PageSize: o.g.perPage})
+	}
+	reactions := make([]*issues_model.Reaction, 0, 10)
+	if err := sess.Find(&reactions); err != nil {
+		panic(err)
+	}
+	_, err := (issues_model.ReactionList)(reactions).LoadUsers(ctx, nil)
+	if err != nil {
+		panic(err)
+	}
+	return util.ConvertMap[*issues_model.Reaction, *Reaction](reactions, ReactionConverter)
+}
+
+func (o *ReactionProvider) ProcessObject(ctx context.Context, user *User, project *Project, parents []common.ContainerObjectInterface, reaction *Reaction) {
+}
+
+func (o *ReactionProvider) Get(ctx context.Context, user *User, project *Project, parents []common.ContainerObjectInterface, exemplar *Reaction) *Reaction {
+	reaction := &Reaction{}
+	has, err := db.GetEngine(ctx).ID(exemplar.GetID()).Get(&reaction.Reaction)
+	if err != nil {
+		panic(err)
+	} else if !has {
+		return &Reaction{}
+	}
+	if _, err := (issues_model.ReactionList{&reaction.Reaction}).LoadUsers(ctx, nil); err != nil {
+		panic(err)
+	}
+	return reaction
+}
+
+func (o *ReactionProvider) Put(ctx context.Context, user *User, project *Project, parents []common.ContainerObjectInterface, reaction *Reaction) *Reaction {
+	r := &issues_model.Reaction{
+		Type:   reaction.Type,
+		UserID: o.g.GetDoer().ID,
+	}
+	switch l := parents[len(parents)-1].(type) {
+	case *Issue:
+		r.IssueID = l.ID
+		r.CommentID = 0
+	case *Comment:
+		i, ok := parents[len(parents)-2].(*Issue)
+		if !ok {
+			panic(fmt.Errorf("unexpected type %T", parents[len(parents)-2]))
+		}
+		r.IssueID = i.ID
+		r.CommentID = l.ID
+	default:
+		panic(fmt.Errorf("unexpected type %T", parents[len(parents)-1]))
+	}
+
+	ctx, committer, err := db.TxContext(ctx)
+	if err != nil {
+		panic(err)
+	}
+	defer committer.Close()
+
+	if _, err := db.GetEngine(ctx).Insert(r); err != nil {
+		panic(err)
+	}
+
+	if err := committer.Commit(); err != nil {
+		panic(err)
+	}
+	return ReactionConverter(r)
+}
+
+func (o *ReactionProvider) Delete(ctx context.Context, user *User, project *Project, parents []common.ContainerObjectInterface, reaction *Reaction) *Reaction {
+	r := o.Get(ctx, user, project, parents, reaction)
+	if !r.IsNil() {
+		if _, err := db.GetEngine(ctx).Delete(&reaction.Reaction); err != nil {
+			panic(err)
+		}
+		return reaction
+	}
+	return r
+}
--- a/services/f3/driver/release.go
+++ b/services/f3/driver/release.go
@ -0,0 +1,174 @@
+// SPDX-License-Identifier: MIT
+
+package driver
+
+import (
+	"context"
+	"fmt"
+	"strings"
+	"time"
+
+	"code.gitea.io/gitea/models/db"
+	repo_model "code.gitea.io/gitea/models/repo"
+	user_model "code.gitea.io/gitea/models/user"
+	"code.gitea.io/gitea/modules/git"
+	"code.gitea.io/gitea/modules/timeutil"
+	release_service "code.gitea.io/gitea/services/release"
+
+	"lab.forgefriends.org/friendlyforgeformat/gof3/format"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/util"
+)
+
+type Release struct {
+	repo_model.Release
+}
+
+func ReleaseConverter(f *repo_model.Release) *Release {
+	return &Release{
+		Release: *f,
+	}
+}
+
+func (o Release) GetID() int64 {
+	return o.ID
+}
+
+func (o Release) GetIDString() string {
+	return fmt.Sprintf("%d", o.GetID())
+}
+
+func (o *Release) SetID(id int64) {
+	o.ID = id
+}
+
+func (o *Release) SetIDString(id string) {
+	o.SetID(util.ParseInt(id))
+}
+
+func (o *Release) IsNil() bool {
+	return o.ID == 0
+}
+
+func (o *Release) Equals(other *Release) bool {
+	return o.ID == other.ID
+}
+
+func (o *Release) ToFormatInterface() format.Interface {
+	return o.ToFormat()
+}
+
+func (o *Release) ToFormat() *format.Release {
+	return &format.Release{
+		Common:          format.NewCommon(o.ID),
+		TagName:         o.TagName,
+		TargetCommitish: o.Target,
+		Name:            o.Title,
+		Body:            o.Note,
+		Draft:           o.IsDraft,
+		Prerelease:      o.IsPrerelease,
+		Created:         o.CreatedUnix.AsTime(),
+		PublisherID:     format.NewUserReference(o.Publisher.ID),
+	}
+}
+
+func (o *Release) FromFormat(release *format.Release) {
+	if release.Created.IsZero() {
+		if !release.Published.IsZero() {
+			release.Created = release.Published
+		} else {
+			release.Created = time.Now()
+		}
+	}
+
+	*o = Release{
+		repo_model.Release{
+			PublisherID: release.PublisherID.GetID(),
+			Publisher: &user_model.User{
+				ID: release.PublisherID.GetID(),
+			},
+			TagName:      release.TagName,
+			LowerTagName: strings.ToLower(release.TagName),
+			Target:       release.TargetCommitish,
+			Title:        release.Name,
+			Note:         release.Body,
+			IsDraft:      release.Draft,
+			IsPrerelease: release.Prerelease,
+			IsTag:        false,
+			CreatedUnix:  timeutil.TimeStamp(release.Created.Unix()),
+		},
+	}
+}
+
+type ReleaseProvider struct {
+	BaseProvider
+}
+
+func (o *ReleaseProvider) ToFormat(ctx context.Context, release *Release) *format.Release {
+	return release.ToFormat()
+}
+
+func (o *ReleaseProvider) FromFormat(ctx context.Context, i *format.Release) *Release {
+	var release Release
+	release.FromFormat(i)
+	return &release
+}
+
+func (o *ReleaseProvider) GetObjects(ctx context.Context, user *User, project *Project, page int) []*Release {
+	releases, err := repo_model.GetReleasesByRepoID(ctx, project.GetID(), repo_model.FindReleasesOptions{
+		ListOptions:   db.ListOptions{Page: page, PageSize: o.g.perPage},
+		IncludeDrafts: true,
+		IncludeTags:   false,
+	})
+	if err != nil {
+		panic(fmt.Errorf("error while listing releases: %v", err))
+	}
+
+	return util.ConvertMap[*repo_model.Release, *Release](releases, ReleaseConverter)
+}
+
+func (o *ReleaseProvider) ProcessObject(ctx context.Context, user *User, project *Project, release *Release) {
+	if err := (&release.Release).LoadAttributes(ctx); err != nil {
+		panic(err)
+	}
+}
+
+func (o *ReleaseProvider) Get(ctx context.Context, user *User, project *Project, exemplar *Release) *Release {
+	id := exemplar.GetID()
+	release, err := repo_model.GetReleaseByID(ctx, id)
+	if repo_model.IsErrReleaseNotExist(err) {
+		return &Release{}
+	}
+	if err != nil {
+		panic(err)
+	}
+	r := ReleaseConverter(release)
+	o.ProcessObject(ctx, user, project, r)
+	return r
+}
+
+func (o *ReleaseProvider) Put(ctx context.Context, user *User, project *Project, release *Release) *Release {
+	r := release.Release
+	r.RepoID = project.GetID()
+
+	repoPath := repo_model.RepoPath(user.Name, project.Name)
+	gitRepo, err := git.OpenRepository(ctx, repoPath)
+	if err != nil {
+		panic(err)
+	}
+	defer gitRepo.Close()
+
+	if err := release_service.CreateRelease(gitRepo, &r, nil, ""); err != nil {
+		panic(err)
+	}
+	return o.Get(ctx, user, project, ReleaseConverter(&r))
+}
+
+func (o *ReleaseProvider) Delete(ctx context.Context, user *User, project *Project, release *Release) *Release {
+	m := o.Get(ctx, user, project, release)
+	if !m.IsNil() {
+		if err := release_service.DeleteReleaseByID(ctx, release.GetID(), o.g.GetDoer(), false); err != nil {
+			panic(err)
+		}
+	}
+	return m
+}
--- a/services/f3/driver/repository.go
+++ b/services/f3/driver/repository.go
@ -0,0 +1,106 @@
+// SPDX-License-Identifier: MIT
+
+package driver
+
+import (
+	"context"
+
+	repo_model "code.gitea.io/gitea/models/repo"
+	base "code.gitea.io/gitea/modules/migration"
+	repo_module "code.gitea.io/gitea/modules/repository"
+	"code.gitea.io/gitea/services/migrations"
+
+	"lab.forgefriends.org/friendlyforgeformat/gof3/format"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/util"
+)
+
+type Repository struct {
+	format.Repository
+}
+
+func (o *Repository) Equals(other *Repository) bool {
+	return false // it is costly to figure that out, mirroring is as fast
+}
+
+func (o *Repository) ToFormatInterface() format.Interface {
+	return o.ToFormat()
+}
+
+func (o *Repository) ToFormat() *format.Repository {
+	return &o.Repository
+}
+
+func (o *Repository) FromFormat(repository *format.Repository) {
+	o.Repository = *repository
+}
+
+type RepositoryProvider struct {
+	BaseProvider
+}
+
+func (o *RepositoryProvider) ToFormat(ctx context.Context, repository *Repository) *format.Repository {
+	return repository.ToFormat()
+}
+
+func (o *RepositoryProvider) FromFormat(ctx context.Context, p *format.Repository) *Repository {
+	var repository Repository
+	repository.FromFormat(p)
+	return &repository
+}
+
+func (o *RepositoryProvider) GetObjects(ctx context.Context, user *User, project *Project, page int) []*Repository {
+	if page > 0 {
+		return make([]*Repository, 0)
+	}
+	repositories := make([]*Repository, len(format.RepositoryNames))
+	for _, name := range format.RepositoryNames {
+		repositories = append(repositories, o.Get(ctx, user, project, &Repository{
+			Repository: format.Repository{
+				Name: name,
+			},
+		}))
+	}
+	return repositories
+}
+
+func (o *RepositoryProvider) ProcessObject(ctx context.Context, user *User, project *Project, repository *Repository) {
+}
+
+func (o *RepositoryProvider) Get(ctx context.Context, user *User, project *Project, exemplar *Repository) *Repository {
+	repoPath := repo_model.RepoPath(user.Name, project.Name) + exemplar.Name
+	return &Repository{
+		Repository: format.Repository{
+			Name: exemplar.Name,
+			FetchFunc: func(destination string) {
+				util.Command(ctx, "git", "clone", "--bare", repoPath, destination)
+			},
+		},
+	}
+}
+
+func (o *RepositoryProvider) Put(ctx context.Context, user *User, project *Project, repository *Repository) *Repository {
+	if repository.FetchFunc != nil {
+		directory, delete := format.RepositoryDefaultDirectory()
+		defer delete()
+		repository.FetchFunc(directory)
+
+		_, err := repo_module.MigrateRepositoryGitData(ctx, &user.User, &project.Repository, base.MigrateOptions{
+			RepoName:       project.Name,
+			Mirror:         false,
+			MirrorInterval: "",
+			LFS:            false,
+			LFSEndpoint:    "",
+			CloneAddr:      directory,
+			Wiki:           o.g.GetOptions().GetFeatures().Wiki,
+			Releases:       o.g.GetOptions().GetFeatures().Releases,
+		}, migrations.NewMigrationHTTPTransport())
+		if err != nil {
+			panic(err)
+		}
+	}
+	return o.Get(ctx, user, project, repository)
+}
+
+func (o *RepositoryProvider) Delete(ctx context.Context, user *User, project *Project, repository *Repository) *Repository {
+	panic("It is not possible to delete a repository")
+}
--- a/services/f3/driver/review.go
+++ b/services/f3/driver/review.go
@ -0,0 +1,221 @@
+// SPDX-License-Identifier: MIT
+
+package driver
+
+import (
+	"context"
+	"fmt"
+
+	"code.gitea.io/gitea/models/db"
+	issues_model "code.gitea.io/gitea/models/issues"
+	user_model "code.gitea.io/gitea/models/user"
+	"code.gitea.io/gitea/modules/timeutil"
+	"code.gitea.io/gitea/services/convert"
+
+	"lab.forgefriends.org/friendlyforgeformat/gof3/format"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/util"
+)
+
+type Review struct {
+	issues_model.Review
+}
+
+func ReviewConverter(f *issues_model.Review) *Review {
+	return &Review{
+		Review: *f,
+	}
+}
+
+func (o Review) GetID() int64 {
+	return o.ID
+}
+
+func (o Review) GetIDString() string {
+	return fmt.Sprintf("%d", o.GetID())
+}
+
+func (o *Review) SetID(id int64) {
+	o.ID = id
+}
+
+func (o *Review) SetIDString(id string) {
+	o.SetID(util.ParseInt(id))
+}
+
+func (o *Review) IsNil() bool {
+	return o.ID == 0
+}
+
+func (o *Review) Equals(other *Review) bool {
+	return o.Content == other.Content
+}
+
+func (o *Review) ToFormatInterface() format.Interface {
+	return o.ToFormat()
+}
+
+func (o *Review) ToFormat() *format.Review {
+	comments := make([]*format.ReviewComment, 0, len(o.Comments))
+	for _, comment := range o.Comments {
+		comments = append(comments, &format.ReviewComment{
+			Common: format.NewCommon(comment.ID),
+			// InReplyTo
+			Content:   comment.Content,
+			TreePath:  comment.TreePath,
+			DiffHunk:  convert.Patch2diff(comment.Patch),
+			Patch:     comment.Patch,
+			Line:      int(comment.Line),
+			CommitID:  comment.CommitSHA,
+			PosterID:  format.NewUserReference(comment.PosterID),
+			CreatedAt: comment.CreatedUnix.AsTime(),
+			UpdatedAt: comment.UpdatedUnix.AsTime(),
+		})
+	}
+
+	review := format.Review{
+		Common:     format.NewCommon(o.Review.ID),
+		IssueIndex: o.IssueID,
+		Official:   o.Review.Official,
+		CommitID:   o.Review.CommitID,
+		Content:    o.Review.Content,
+		CreatedAt:  o.Review.CreatedUnix.AsTime(),
+		State:      format.ReviewStateUnknown,
+		Comments:   comments,
+	}
+
+	if o.Review.Reviewer != nil {
+		review.ReviewerID = format.NewUserReference(o.Review.Reviewer.ID)
+	}
+
+	switch o.Type {
+	case issues_model.ReviewTypeApprove:
+		review.State = format.ReviewStateApproved
+	case issues_model.ReviewTypeReject:
+		review.State = format.ReviewStateChangesRequested
+	case issues_model.ReviewTypeComment:
+		review.State = format.ReviewStateCommented
+	case issues_model.ReviewTypePending:
+		review.State = format.ReviewStatePending
+	case issues_model.ReviewTypeRequest:
+		review.State = format.ReviewStateRequestReview
+	}
+
+	return &review
+}
+
+func (o *Review) FromFormat(review *format.Review) {
+	comments := make([]*issues_model.Comment, 0, len(review.Comments))
+	for _, comment := range review.Comments {
+		comments = append(comments, &issues_model.Comment{
+			ID:   comment.GetID(),
+			Type: issues_model.CommentTypeReview,
+			// InReplyTo
+			CommitSHA:   comment.CommitID,
+			Line:        int64(comment.Line),
+			TreePath:    comment.TreePath,
+			Content:     comment.Content,
+			Patch:       comment.Patch,
+			PosterID:    comment.PosterID.GetID(),
+			CreatedUnix: timeutil.TimeStamp(comment.CreatedAt.Unix()),
+			UpdatedUnix: timeutil.TimeStamp(comment.UpdatedAt.Unix()),
+		})
+	}
+	*o = Review{
+		Review: issues_model.Review{
+			ID:         review.GetID(),
+			ReviewerID: review.ReviewerID.GetID(),
+			Reviewer: &user_model.User{
+				ID: review.ReviewerID.GetID(),
+			},
+			IssueID:     review.IssueIndex,
+			Official:    review.Official,
+			CommitID:    review.CommitID,
+			Content:     review.Content,
+			CreatedUnix: timeutil.TimeStamp(review.CreatedAt.Unix()),
+			Comments:    comments,
+		},
+	}
+
+	switch review.State {
+	case format.ReviewStateApproved:
+		o.Type = issues_model.ReviewTypeApprove
+	case format.ReviewStateChangesRequested:
+		o.Type = issues_model.ReviewTypeReject
+	case format.ReviewStateCommented:
+		o.Type = issues_model.ReviewTypeComment
+	case format.ReviewStatePending:
+		o.Type = issues_model.ReviewTypePending
+	case format.ReviewStateRequestReview:
+		o.Type = issues_model.ReviewTypeRequest
+	}
+}
+
+type ReviewProvider struct {
+	BaseProvider
+}
+
+func (o *ReviewProvider) ToFormat(ctx context.Context, review *Review) *format.Review {
+	return review.ToFormat()
+}
+
+func (o *ReviewProvider) FromFormat(ctx context.Context, r *format.Review) *Review {
+	var review Review
+	review.FromFormat(r)
+	return &review
+}
+
+func (o *ReviewProvider) GetObjects(ctx context.Context, user *User, project *Project, pullRequest *PullRequest, page int) []*Review {
+	reviews, err := issues_model.FindReviews(ctx, issues_model.FindReviewOptions{
+		ListOptions: db.ListOptions{Page: page, PageSize: o.g.perPage},
+		IssueID:     pullRequest.IssueID,
+	})
+	if err != nil {
+		panic(fmt.Errorf("error while listing reviews: %v", err))
+	}
+
+	return util.ConvertMap[*issues_model.Review, *Review](reviews, ReviewConverter)
+}
+
+func (o *ReviewProvider) ProcessObject(ctx context.Context, user *User, project *Project, pullRequest *PullRequest, review *Review) {
+	if err := (&review.Review).LoadAttributes(ctx); err != nil {
+		panic(err)
+	}
+}
+
+func (o *ReviewProvider) Get(ctx context.Context, user *User, project *Project, pullRequest *PullRequest, exemplar *Review) *Review {
+	id := exemplar.GetID()
+	review, err := issues_model.GetReviewByID(ctx, id)
+	if issues_model.IsErrReviewNotExist(err) {
+		return &Review{}
+	}
+	if err != nil {
+		panic(err)
+	}
+	if err := review.LoadAttributes(ctx); err != nil {
+		panic(err)
+	}
+	return ReviewConverter(review)
+}
+
+func (o *ReviewProvider) Put(ctx context.Context, user *User, project *Project, pullRequest *PullRequest, review *Review) *Review {
+	r := &review.Review
+	r.ID = 0
+	for _, comment := range r.Comments {
+		comment.ID = 0
+	}
+	r.IssueID = pullRequest.IssueID
+	if err := issues_model.InsertReviews([]*issues_model.Review{r}); err != nil {
+		panic(err)
+	}
+	return o.Get(ctx, user, project, pullRequest, ReviewConverter(r))
+}
+
+func (o *ReviewProvider) Delete(ctx context.Context, user *User, project *Project, pullRequest *PullRequest, review *Review) *Review {
+	r := o.Get(ctx, user, project, pullRequest, review)
+	if !r.IsNil() {
+		if err := issues_model.DeleteReview(&r.Review); err != nil {
+			panic(err)
+		}
+	}
+	return r
+}
--- a/services/f3/driver/topic.go
+++ b/services/f3/driver/topic.go
@ -0,0 +1,129 @@
+// SPDX-License-Identifier: MIT
+
+package driver
+
+import (
+	"context"
+	"fmt"
+
+	"code.gitea.io/gitea/models/db"
+	repo_model "code.gitea.io/gitea/models/repo"
+
+	"lab.forgefriends.org/friendlyforgeformat/gof3/format"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/util"
+)
+
+type Topic struct {
+	repo_model.Topic
+}
+
+func TopicConverter(f *repo_model.Topic) *Topic {
+	return &Topic{
+		Topic: *f,
+	}
+}
+
+func (o Topic) GetID() int64 {
+	return o.ID
+}
+
+func (o Topic) GetIDString() string {
+	return fmt.Sprintf("%d", o.GetID())
+}
+
+func (o *Topic) SetID(id int64) {
+	o.ID = id
+}
+
+func (o *Topic) SetIDString(id string) {
+	o.SetID(util.ParseInt(id))
+}
+
+func (o *Topic) IsNil() bool {
+	return o.ID == 0
+}
+
+func (o *Topic) Equals(other *Topic) bool {
+	return o.Name == other.Name
+}
+
+func (o *Topic) ToFormatInterface() format.Interface {
+	return o.ToFormat()
+}
+
+func (o *Topic) ToFormat() *format.Topic {
+	return &format.Topic{
+		Common: format.NewCommon(o.ID),
+		Name:   o.Name,
+	}
+}
+
+func (o *Topic) FromFormat(topic *format.Topic) {
+	*o = Topic{
+		Topic: repo_model.Topic{
+			ID:   topic.Index.GetID(),
+			Name: topic.Name,
+		},
+	}
+}
+
+type TopicProvider struct {
+	BaseProvider
+}
+
+func (o *TopicProvider) ToFormat(ctx context.Context, topic *Topic) *format.Topic {
+	return topic.ToFormat()
+}
+
+func (o *TopicProvider) FromFormat(ctx context.Context, m *format.Topic) *Topic {
+	var topic Topic
+	topic.FromFormat(m)
+	return &topic
+}
+
+func (o *TopicProvider) GetObjects(ctx context.Context, user *User, project *Project, page int) []*Topic {
+	topics, _, err := repo_model.FindTopics(&repo_model.FindTopicOptions{
+		ListOptions: db.ListOptions{Page: page, PageSize: o.g.perPage},
+		RepoID:      project.GetID(),
+	})
+	if err != nil {
+		panic(err)
+	}
+
+	return util.ConvertMap[*repo_model.Topic, *Topic](topics, TopicConverter)
+}
+
+func (o *TopicProvider) ProcessObject(ctx context.Context, user *User, project *Project, topic *Topic) {
+}
+
+func (o *TopicProvider) Get(ctx context.Context, user *User, project *Project, exemplar *Topic) *Topic {
+	id := exemplar.GetID()
+	topic, err := repo_model.GetRepoTopicByID(ctx, project.GetID(), id)
+	if repo_model.IsErrTopicNotExist(err) {
+		return &Topic{}
+	}
+	if err != nil {
+		panic(err)
+	}
+	return TopicConverter(topic)
+}
+
+func (o *TopicProvider) Put(ctx context.Context, user *User, project *Project, topic *Topic) *Topic {
+	t, err := repo_model.AddTopic(project.GetID(), topic.Name)
+	if err != nil {
+		panic(err)
+	}
+	return o.Get(ctx, user, project, TopicConverter(t))
+}
+
+func (o *TopicProvider) Delete(ctx context.Context, user *User, project *Project, topic *Topic) *Topic {
+	t := o.Get(ctx, user, project, topic)
+	if !t.IsNil() {
+		t, err := repo_model.DeleteTopic(project.GetID(), t.Name)
+		if err != nil {
+			panic(err)
+		}
+		return TopicConverter(t)
+	}
+	return t
+}
--- a/services/f3/driver/user.go
+++ b/services/f3/driver/user.go
@ -0,0 +1,185 @@
+// SPDX-License-Identifier: MIT
+
+package driver
+
+import (
+	"context"
+	"fmt"
+
+	auth_model "code.gitea.io/gitea/models/auth"
+	"code.gitea.io/gitea/models/db"
+	user_model "code.gitea.io/gitea/models/user"
+	"code.gitea.io/gitea/modules/util"
+	user_service "code.gitea.io/gitea/services/user"
+
+	"lab.forgefriends.org/friendlyforgeformat/gof3/forges/common"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/format"
+	f3_util "lab.forgefriends.org/friendlyforgeformat/gof3/util"
+)
+
+type User struct {
+	user_model.User
+}
+
+func UserConverter(f *user_model.User) *User {
+	return &User{
+		User: *f,
+	}
+}
+
+func (o User) GetID() int64 {
+	return o.ID
+}
+
+func (o User) GetIDString() string {
+	return fmt.Sprintf("%d", o.GetID())
+}
+
+func (o *User) SetID(id int64) {
+	o.ID = id
+}
+
+func (o *User) SetIDString(id string) {
+	o.SetID(f3_util.ParseInt(id))
+}
+
+func (o *User) IsNil() bool {
+	return o.ID == 0
+}
+
+func (o *User) Equals(other *User) bool {
+	return (o.ID == other.ID)
+}
+
+func (o *User) ToFormatInterface() format.Interface {
+	return o.ToFormat()
+}
+
+func (o *User) ToFormat() *format.User {
+	return &format.User{
+		Common:   format.NewCommon(o.ID),
+		UserName: o.Name,
+		Name:     o.FullName,
+		Email:    o.Email,
+		Password: o.Passwd,
+	}
+}
+
+func (o *User) FromFormat(user *format.User) {
+	*o = User{
+		User: user_model.User{
+			ID:       user.Index.GetID(),
+			Name:     user.UserName,
+			FullName: user.Name,
+			Email:    user.Email,
+			Passwd:   user.Password,
+		},
+	}
+}
+
+type UserProvider struct {
+	BaseProvider
+}
+
+func getLocalMatchingRemote(ctx context.Context, authenticationSource int64, id string) *user_model.User {
+	u := &user_model.User{
+		LoginName:   id,
+		LoginSource: authenticationSource,
+		LoginType:   auth_model.OAuth2,
+		Type:        user_model.UserTypeIndividual,
+	}
+	has, err := db.GetEngine(ctx).Get(u)
+	if err != nil {
+		panic(err)
+	} else if !has {
+		return nil
+	}
+	return u
+}
+
+func (o *UserProvider) GetLocalMatchingRemote(ctx context.Context, format format.Interface, parents ...common.ContainerObjectInterface) (string, bool) {
+	authenticationSource := o.g.GetAuthenticationSource()
+	if authenticationSource == 0 {
+		return "", false
+	}
+	user := getLocalMatchingRemote(ctx, authenticationSource, format.GetIDString())
+	if user != nil {
+		o.g.GetLogger().Debug("found existing user %d with a matching authentication source for %s", user.ID, format.GetIDString())
+		return fmt.Sprintf("%d", user.ID), true
+	}
+	o.g.GetLogger().Debug("no pre-existing local user for %s", format.GetIDString())
+	return "", false
+}
+
+func (o *UserProvider) ToFormat(ctx context.Context, user *User) *format.User {
+	return user.ToFormat()
+}
+
+func (o *UserProvider) FromFormat(ctx context.Context, p *format.User) *User {
+	var user User
+	user.FromFormat(p)
+	return &user
+}
+
+func (o *UserProvider) GetObjects(ctx context.Context, page int) []*User {
+	users, _, err := user_model.SearchUsers(&user_model.SearchUserOptions{
+		Actor:       o.g.GetDoer(),
+		Type:        user_model.UserTypeIndividual,
+		ListOptions: db.ListOptions{Page: page, PageSize: o.g.perPage},
+	})
+	if err != nil {
+		panic(fmt.Errorf("error while listing users: %v", err))
+	}
+	return f3_util.ConvertMap[*user_model.User, *User](users, UserConverter)
+}
+
+func (o *UserProvider) ProcessObject(ctx context.Context, user *User) {
+}
+
+func (o *UserProvider) Get(ctx context.Context, exemplar *User) *User {
+	o.g.GetLogger().Debug("%+v", exemplar)
+	var user *user_model.User
+	var err error
+	if exemplar.GetID() > 0 {
+		user, err = user_model.GetUserByID(ctx, exemplar.GetID())
+		o.g.GetLogger().Debug("GetUserByID: %+v %v", user, err)
+	} else if exemplar.Name != "" {
+		user, err = user_model.GetUserByName(ctx, exemplar.Name)
+	} else {
+		panic("GetID() == 0 and UserName == \"\"")
+	}
+	if err != nil {
+		if user_model.IsErrUserNotExist(err) {
+			return &User{}
+		}
+		panic(fmt.Errorf("user %v %w", exemplar, err))
+	}
+	return UserConverter(user)
+}
+
+func (o *UserProvider) Put(ctx context.Context, user *User) *User {
+	overwriteDefault := &user_model.CreateUserOverwriteOptions{
+		IsActive: util.OptionalBoolTrue,
+	}
+	u := user_model.User{
+		Name:     user.Name,
+		FullName: user.FullName,
+		Email:    user.Email,
+		Passwd:   user.Passwd,
+	}
+	err := user_model.CreateUser(&u, overwriteDefault)
+	if err != nil {
+		panic(err)
+	}
+	return o.Get(ctx, UserConverter(&u))
+}
+
+func (o *UserProvider) Delete(ctx context.Context, user *User) *User {
+	u := o.Get(ctx, user)
+	if !u.IsNil() {
+		if err := user_service.DeleteUser(ctx, &user.User, true); err != nil {
+			panic(err)
+		}
+	}
+	return u
+}
--- a/services/f3/promote.go
+++ b/services/f3/promote.go
@ -0,0 +1,110 @@
+// SPDX-FileCopyrightText: Copyright the Forgejo contributors
+// SPDX-License-Identifier: MIT
+
+package f3
+
+import (
+	"context"
+
+	auth_model "code.gitea.io/gitea/models/auth"
+	"code.gitea.io/gitea/models/db"
+	user_model "code.gitea.io/gitea/models/user"
+	"code.gitea.io/gitea/modules/log"
+	f3_source "code.gitea.io/gitea/services/auth/source/f3"
+	"code.gitea.io/gitea/services/auth/source/oauth2"
+)
+
+func getUserByLoginName(ctx context.Context, name string) (*user_model.User, error) {
+	if len(name) == 0 {
+		return nil, user_model.ErrUserNotExist{Name: name}
+	}
+	u := &user_model.User{LoginName: name, LoginType: auth_model.F3, Type: user_model.UserTypeRemoteUser}
+	has, err := db.GetEngine(ctx).Get(u)
+	if err != nil {
+		return nil, err
+	} else if !has {
+		return nil, user_model.ErrUserNotExist{Name: name}
+	}
+	return u, nil
+}
+
+// The user created by F3 has:
+//
+//	Type        UserTypeRemoteUser
+//	LogingType  F3
+//	LoginName   set to the unique identifier of the originating forge
+//	LoginSource set to the F3 source that can be matched against a OAuth2 source
+//
+// If the source from which an authentification happens is OAuth2, a existing
+// F3 user will be promoted to an OAuth2 user provided:
+//
+//	user.LoginName is the same as goth.UserID (argument loginName)
+//	user.LoginSource has a MatchingSource equals to the name of the OAuth2 provider
+//
+// Once promoted, the user will be logged in without further interaction from the
+// user and will own all repositories, issues, etc. associated with it.
+func MaybePromoteF3User(ctx context.Context, source *auth_model.Source, loginName, email string) error {
+	user, err := getF3UserToPromote(ctx, source, loginName, email)
+	if err != nil {
+		return err
+	}
+	if user != nil {
+		promote := &user_model.User{
+			ID:          user.ID,
+			Type:        user_model.UserTypeIndividual,
+			Email:       email,
+			LoginSource: source.ID,
+			LoginType:   source.Type,
+		}
+		log.Debug("promote user %v: LoginName %v => %v, LoginSource %v => %v, LoginType %v => %v, Email %v => %v", user.ID, user.LoginName, promote.LoginName, user.LoginSource, promote.LoginSource, user.LoginType, promote.LoginType, user.Email, promote.Email)
+		return user_model.UpdateUser(ctx, promote, true, "type", "email", "login_source", "login_type")
+	}
+	return nil
+}
+
+func getF3UserToPromote(ctx context.Context, source *auth_model.Source, loginName, email string) (*user_model.User, error) {
+	if !source.IsOAuth2() {
+		log.Debug("getF3UserToPromote: source %v is not OAuth2", source)
+		return nil, nil
+	}
+	oauth2Source, ok := source.Cfg.(*oauth2.Source)
+	if !ok {
+		log.Error("getF3UserToPromote: source claims to be OAuth2 but really is %v", oauth2Source)
+		return nil, nil
+	}
+
+	u, err := getUserByLoginName(ctx, loginName)
+	if err != nil {
+		if user_model.IsErrUserNotExist(err) {
+			log.Debug("getF3UserToPromote: no user with LoginType F3 and LoginName '%s'", loginName)
+			return nil, nil
+		}
+		return nil, err
+	}
+
+	if u.Email != "" {
+		log.Debug("getF3UserToPromote: the user email is already set to '%s'", u.Email)
+		return nil, nil
+	}
+
+	userSource, err := auth_model.GetSourceByID(u.LoginSource)
+	if err != nil {
+		if auth_model.IsErrSourceNotExist(err) {
+			log.Error("getF3UserToPromote: source id = %v for user %v not found %v", u.LoginSource, u.ID, err)
+			return nil, nil
+		}
+		return nil, err
+	}
+	f3Source, ok := userSource.Cfg.(*f3_source.Source)
+	if !ok {
+		log.Error("getF3UserToPromote: expected an F3 source but got %T %v", userSource, userSource)
+		return nil, nil
+	}
+
+	if oauth2Source.Provider != f3Source.MatchingSource {
+		log.Debug("getF3UserToPromote: skip OAuth2 source %s because it is different from %s which is the expected match for the F3 source %s", oauth2Source.Provider, f3Source.MatchingSource, f3Source.URL)
+		return nil, nil
+	}
+
+	return u, nil
+}
--- a/services/f3/util/util.go
+++ b/services/f3/util/util.go
@ -0,0 +1,58 @@
+// SPDX-License-Identifier: MIT
+
+package util
+
+import (
+	user_model "code.gitea.io/gitea/models/user"
+	"code.gitea.io/gitea/modules/log"
+	base "code.gitea.io/gitea/modules/migration"
+	"code.gitea.io/gitea/services/f3/driver"
+
+	"lab.forgefriends.org/friendlyforgeformat/gof3"
+	f3_forges "lab.forgefriends.org/friendlyforgeformat/gof3/forges"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/forges/f3"
+)
+
+func ToF3Logger(messenger base.Messenger) gof3.Logger {
+	if messenger == nil {
+		messenger = func(message string, args ...interface{}) {
+			log.Info("Message: "+message, args...)
+		}
+	}
+	return gof3.Logger{
+		Message:  messenger,
+		Trace:    log.Trace,
+		Debug:    log.Debug,
+		Info:     log.Info,
+		Warn:     log.Warn,
+		Error:    log.Error,
+		Critical: log.Critical,
+		Fatal:    log.Fatal,
+	}
+}
+
+func ForgejoForgeRoot(features gof3.Features, doer *user_model.User, authenticationSource int64) *f3_forges.ForgeRoot {
+	forgeRoot := f3_forges.NewForgeRootFromDriver(&driver.Forgejo{}, &driver.Options{
+		Options: gof3.Options{
+			Features: features,
+			Logger:   ToF3Logger(nil),
+		},
+		Doer:                 doer,
+		AuthenticationSource: authenticationSource,
+	})
+	return forgeRoot
+}
+
+func F3ForgeRoot(features gof3.Features, directory string) *f3_forges.ForgeRoot {
+	forgeRoot := f3_forges.NewForgeRoot(&f3.Options{
+		Options: gof3.Options{
+			Configuration: gof3.Configuration{
+				Directory: directory,
+			},
+			Features: features,
+			Logger:   ToF3Logger(nil),
+		},
+		Remap: true,
+	})
+	return forgeRoot
+}
--- a/tests/integration/cmd_f3_test.go
+++ b/tests/integration/cmd_f3_test.go
@ -0,0 +1,110 @@
+// SPDX-License-Identifier: MIT
+
+package integration
+
+import (
+	"bytes"
+	"context"
+	"flag"
+	"io"
+	"net/url"
+	"os"
+	"testing"
+
+	"code.gitea.io/gitea/cmd"
+	"code.gitea.io/gitea/modules/setting"
+	"code.gitea.io/gitea/services/migrations"
+
+	"github.com/stretchr/testify/assert"
+	"github.com/urfave/cli"
+	f3_forges "lab.forgefriends.org/friendlyforgeformat/gof3/forges"
+	f3_util "lab.forgefriends.org/friendlyforgeformat/gof3/util"
+)
+
+func Test_CmdF3(t *testing.T) {
+	onGiteaRun(t, func(*testing.T, *url.URL) {
+		AllowLocalNetworks := setting.Migrations.AllowLocalNetworks
+		setting.F3.Enabled = true
+		setting.Migrations.AllowLocalNetworks = true
+		// without migrations.Init() AllowLocalNetworks = true is not effective and
+		// a http call fails with "...migration can only call allowed HTTP servers..."
+		migrations.Init()
+		AppVer := setting.AppVer
+		// Gitea SDK (go-sdk) need to parse the AppVer from server response, so we must set it to a valid version string.
+		setting.AppVer = "1.16.0"
+		defer func() {
+			setting.Migrations.AllowLocalNetworks = AllowLocalNetworks
+			setting.AppVer = AppVer
+		}()
+
+		//
+		// Step 1: create a fixture
+		//
+		fixture := f3_forges.NewFixture(t, f3_forges.FixtureF3Factory)
+		fixture.NewUser(1234)
+		fixture.NewMilestone()
+		fixture.NewLabel()
+		fixture.NewIssue()
+		fixture.NewTopic()
+		fixture.NewRepository()
+		fixture.NewRelease()
+		fixture.NewAsset()
+		fixture.NewIssueComment(nil)
+		fixture.NewIssueReaction()
+
+		//
+		// Step 2: import the fixture into Gitea
+		//
+		cmd.CmdF3.Action = func(ctx *cli.Context) { cmd.RunF3(context.Background(), ctx) }
+		{
+			realStdout := os.Stdout // Backup Stdout
+			r, w, _ := os.Pipe()
+			os.Stdout = w
+
+			set := flag.NewFlagSet("f3", 0)
+			_ = set.Parse([]string{"f3", "--import", "--directory", fixture.ForgeRoot.GetDirectory()})
+			cliContext := cli.NewContext(&cli.App{Writer: os.Stdout}, set, nil)
+			assert.NoError(t, cmd.CmdF3.Run(cliContext))
+			w.Close()
+			var buf bytes.Buffer
+			io.Copy(&buf, r)
+			commandOutput := buf.String()
+			assert.EqualValues(t, "imported\n", commandOutput)
+			os.Stdout = realStdout
+		}
+
+		//
+		// Step 3: export Gitea into F3
+		//
+		directory := t.TempDir()
+		{
+			realStdout := os.Stdout // Backup Stdout
+			r, w, _ := os.Pipe()
+			os.Stdout = w
+
+			set := flag.NewFlagSet("f3", 0)
+			_ = set.Parse([]string{"f3", "--export", "--no-pull-request", "--user", fixture.UserFormat.UserName, "--repository", fixture.ProjectFormat.Name, "--directory", directory})
+			cliContext := cli.NewContext(&cli.App{Writer: os.Stdout}, set, nil)
+			assert.NoError(t, cmd.CmdF3.Run(cliContext))
+			w.Close()
+			var buf bytes.Buffer
+			io.Copy(&buf, r)
+			commandOutput := buf.String()
+			assert.EqualValues(t, "exported\n", commandOutput)
+			os.Stdout = realStdout
+
+		}
+
+		//
+		// Step 4: verify the export and import are equivalent
+		//
+		files := f3_util.Command(context.Background(), "find", directory)
+		assert.Contains(t, files, "/label/")
+		assert.Contains(t, files, "/issue/")
+		assert.Contains(t, files, "/milestone/")
+		assert.Contains(t, files, "/topic/")
+		assert.Contains(t, files, "/release/")
+		assert.Contains(t, files, "/asset/")
+		assert.Contains(t, files, "/reaction/")
+	})
+}
--- a/tests/integration/f3_test.go
+++ b/tests/integration/f3_test.go
@ -0,0 +1,270 @@
+// SPDX-License-Identifier: MIT
+
+package integration
+
+import (
+	"context"
+	"fmt"
+	"net/http"
+	"net/url"
+	"testing"
+
+	auth_model "code.gitea.io/gitea/models/auth"
+	"code.gitea.io/gitea/models/unittest"
+	user_model "code.gitea.io/gitea/models/user"
+	"code.gitea.io/gitea/modules/log"
+	"code.gitea.io/gitea/modules/setting"
+	"code.gitea.io/gitea/modules/test"
+	"code.gitea.io/gitea/services/f3/util"
+	"code.gitea.io/gitea/tests"
+
+	"github.com/markbates/goth"
+	"github.com/stretchr/testify/assert"
+	"lab.forgefriends.org/friendlyforgeformat/gof3"
+	f3_forges "lab.forgefriends.org/friendlyforgeformat/gof3/forges"
+	f3_common "lab.forgefriends.org/friendlyforgeformat/gof3/forges/common"
+	f3_f3 "lab.forgefriends.org/friendlyforgeformat/gof3/forges/f3"
+	f3_forgejo "lab.forgefriends.org/friendlyforgeformat/gof3/forges/forgejo"
+	f3_tests "lab.forgefriends.org/friendlyforgeformat/gof3/forges/tests"
+	"lab.forgefriends.org/friendlyforgeformat/gof3/format"
+	f3_util "lab.forgefriends.org/friendlyforgeformat/gof3/util"
+)
+
+func TestF3(t *testing.T) {
+	onGiteaRun(t, func(t *testing.T, u *url.URL) {
+		AllowLocalNetworks := setting.Migrations.AllowLocalNetworks
+		setting.F3.Enabled = true
+		setting.Migrations.AllowLocalNetworks = true
+		AppVer := setting.AppVer
+		// Gitea SDK (go-sdk) need to parse the AppVer from server response, so we must set it to a valid version string.
+		setting.AppVer = "1.16.0"
+		defer func() {
+			setting.Migrations.AllowLocalNetworks = AllowLocalNetworks
+			setting.AppVer = AppVer
+		}()
+
+		//
+		// Step 1: create a fixture
+		//
+		fixtureNewF3Forge := func(t f3_tests.TestingT, user *format.User, tmpDir string) *f3_forges.ForgeRoot {
+			root := f3_forges.NewForgeRoot(&f3_f3.Options{
+				Options: gof3.Options{
+					Configuration: gof3.Configuration{
+						Directory: tmpDir,
+					},
+					Features: gof3.AllFeatures,
+				},
+				Remap: true,
+			})
+			return root
+		}
+		fixture := f3_forges.NewFixture(t, f3_forges.FixtureForgeFactory{Fun: fixtureNewF3Forge, AdminRequired: false})
+		fixture.NewUser(5432)
+		fixture.NewMilestone()
+		fixture.NewLabel()
+		fixture.NewIssue()
+		fixture.NewTopic()
+		fixture.NewRepository()
+		fixture.NewPullRequest()
+		fixture.NewRelease()
+		fixture.NewAsset()
+		fixture.NewIssueComment(nil)
+		fixture.NewPullRequestComment()
+		// fixture.NewReview()
+		fixture.NewIssueReaction()
+		fixture.NewCommentReaction()
+
+		//
+		// Step 2: mirror the fixture into Forgejo
+		//
+		doer, err := user_model.GetAdminUser(context.Background())
+		assert.NoError(t, err)
+		forgejoLocal := util.ForgejoForgeRoot(gof3.AllFeatures, doer, 0)
+		options := f3_common.NewMirrorOptionsRecurse()
+		forgejoLocal.Forge.Mirror(context.Background(), fixture.Forge, options)
+
+		//
+		// Step 3: mirror Forgejo into F3
+		//
+		adminUsername := "user1"
+		forgejoAPI := f3_forges.NewForgeRootFromDriver(&f3_forgejo.Forgejo{}, &f3_forgejo.Options{
+			Options: gof3.Options{
+				Configuration: gof3.Configuration{
+					URL:       setting.AppURL,
+					Directory: t.TempDir(),
+				},
+				Features: gof3.AllFeatures,
+			},
+			AuthToken: getUserToken(t, adminUsername, auth_model.AccessTokenScopeWriteAdmin, auth_model.AccessTokenScopeAll),
+		})
+
+		f3 := f3_forges.FixtureNewF3Forge(t, nil, t.TempDir())
+		apiForge := forgejoAPI.Forge
+		apiUser := apiForge.Users.GetFromFormat(context.Background(), &format.User{UserName: fixture.UserFormat.UserName})
+		apiProject := apiUser.Projects.GetFromFormat(context.Background(), &format.Project{Name: fixture.ProjectFormat.Name})
+		options = f3_common.NewMirrorOptionsRecurse(apiUser, apiProject)
+		f3.Forge.Mirror(context.Background(), apiForge, options)
+
+		//
+		// Step 4: verify the fixture and F3 are equivalent
+		//
+		files := f3_util.Command(context.Background(), "find", f3.GetDirectory())
+		assert.Contains(t, files, "/repository/git/hooks")
+		assert.Contains(t, files, "/label/")
+		assert.Contains(t, files, "/issue/")
+		assert.Contains(t, files, "/milestone/")
+		assert.Contains(t, files, "/topic/")
+		assert.Contains(t, files, "/pull_request/")
+		assert.Contains(t, files, "/release/")
+		assert.Contains(t, files, "/asset/")
+		assert.Contains(t, files, "/comment/")
+		//		assert.Contains(t, files, "/review/")
+		assert.Contains(t, files, "/reaction/")
+		//		f3_util.Command(context.Background(), "cp", "-a", f3.GetDirectory(), "abc")
+	})
+}
+
+func TestMaybePromoteF3User(t *testing.T) {
+	defer tests.PrepareTestEnv(t)()
+
+	//
+	// OAuth2 authentication source GitLab
+	//
+	gitlabName := "gitlab"
+	_ = addAuthSource(t, authSourcePayloadGitLabCustom(gitlabName))
+	//
+	// F3 authentication source matching the GitLab authentication source
+	//
+	f3Name := "f3"
+	f3 := createF3AuthSource(t, f3Name, "http://mygitlab.eu", gitlabName)
+
+	//
+	// Create a user as if it had been previously been created by the F3
+	// authentication source.
+	//
+	gitlabUserID := "5678"
+	gitlabEmail := "gitlabuser@example.com"
+	userBeforeSignIn := &user_model.User{
+		Name:        "gitlabuser",
+		Type:        user_model.UserTypeRemoteUser,
+		LoginType:   auth_model.F3,
+		LoginSource: f3.ID,
+		LoginName:   gitlabUserID,
+	}
+	defer createUser(context.Background(), t, userBeforeSignIn)()
+
+	//
+	// A request for user information sent to Goth will return a
+	// goth.User exactly matching the user created above.
+	//
+	defer mockCompleteUserAuth(func(res http.ResponseWriter, req *http.Request) (goth.User, error) {
+		return goth.User{
+			Provider: gitlabName,
+			UserID:   gitlabUserID,
+			Email:    gitlabEmail,
+		}, nil
+	})()
+	req := NewRequest(t, "GET", fmt.Sprintf("/user/oauth2/%s/callback?code=XYZ&state=XYZ", gitlabName))
+	resp := MakeRequest(t, req, http.StatusSeeOther)
+	assert.Equal(t, "/", test.RedirectURL(resp))
+	userAfterSignIn := unittest.AssertExistsAndLoadBean(t, &user_model.User{ID: userBeforeSignIn.ID})
+
+	// both are about the same user
+	assert.Equal(t, userAfterSignIn.ID, userBeforeSignIn.ID)
+	// the login time was updated, proof the login succeeded
+	assert.Greater(t, userAfterSignIn.LastLoginUnix, userBeforeSignIn.LastLoginUnix)
+	// the login type was promoted from F3 to OAuth2
+	assert.Equal(t, userBeforeSignIn.LoginType, auth_model.F3)
+	assert.Equal(t, userAfterSignIn.LoginType, auth_model.OAuth2)
+	// the OAuth2 email was used to set the missing user email
+	assert.Equal(t, userBeforeSignIn.Email, "")
+	assert.Equal(t, userAfterSignIn.Email, gitlabEmail)
+}
+
+func TestF3UserMapping(t *testing.T) {
+	onGiteaRun(t, func(t *testing.T, u *url.URL) {
+		AllowLocalNetworks := setting.Migrations.AllowLocalNetworks
+		setting.F3.Enabled = true
+		setting.Migrations.AllowLocalNetworks = true
+		AppVer := setting.AppVer
+		// Gitea SDK (go-sdk) need to parse the AppVer from server response, so we must set it to a valid version string.
+		setting.AppVer = "1.16.0"
+		defer func() {
+			setting.Migrations.AllowLocalNetworks = AllowLocalNetworks
+			setting.AppVer = AppVer
+		}()
+
+		log.Debug("Step 1: create a fixture")
+		fixtureNewF3Forge := func(t f3_tests.TestingT, user *format.User, tmpDir string) *f3_forges.ForgeRoot {
+			root := f3_forges.NewForgeRoot(&f3_f3.Options{
+				Options: gof3.Options{
+					Configuration: gof3.Configuration{
+						Directory: tmpDir,
+					},
+					Features: gof3.AllFeatures,
+					Logger:   util.ToF3Logger(nil),
+				},
+				Remap: true,
+			})
+			return root
+		}
+		fixture := f3_forges.NewFixture(t, f3_forges.FixtureForgeFactory{Fun: fixtureNewF3Forge, AdminRequired: false})
+		userID := int64(5432)
+		fixture.NewUser(userID)
+		//		fixture.NewProject()
+
+		log.Debug("Step 2: mirror the fixture into Forgejo")
+		//
+		// OAuth2 authentication source GitLab
+		//
+		gitlabName := "gitlab"
+		gitlab := addAuthSource(t, authSourcePayloadGitLabCustom(gitlabName))
+		//
+		// Create a user as if it had been previously been created by the F3
+		// authentication source.
+		//
+		gitlabUserID := fmt.Sprintf("%d", userID)
+		gitlabUser := &user_model.User{
+			Name:        "gitlabuser",
+			Email:       "gitlabuser@example.com",
+			LoginType:   auth_model.OAuth2,
+			LoginSource: gitlab.ID,
+			LoginName:   gitlabUserID,
+		}
+		defer createUser(context.Background(), t, gitlabUser)()
+
+		doer, err := user_model.GetAdminUser(context.Background())
+		assert.NoError(t, err)
+		forgejoLocal := util.ForgejoForgeRoot(gof3.AllFeatures, doer, gitlab.ID)
+		options := f3_common.NewMirrorOptionsRecurse()
+		forgejoLocal.Forge.Mirror(context.Background(), fixture.Forge, options)
+
+		log.Debug("Step 3: mirror Forgejo into F3")
+		adminUsername := "user1"
+		forgejoAPI := f3_forges.NewForgeRootFromDriver(&f3_forgejo.Forgejo{}, &f3_forgejo.Options{
+			Options: gof3.Options{
+				Configuration: gof3.Configuration{
+					URL:       setting.AppURL,
+					Directory: t.TempDir(),
+				},
+				Features: gof3.AllFeatures,
+				Logger:   util.ToF3Logger(nil),
+			},
+			AuthToken: getUserToken(t, adminUsername, auth_model.AccessTokenScopeWriteAdmin, auth_model.AccessTokenScopeAll),
+		})
+
+		f3 := f3_forges.FixtureNewF3Forge(t, nil, t.TempDir())
+		apiForge := forgejoAPI.Forge
+		apiUser := apiForge.Users.GetFromFormat(context.Background(), &format.User{UserName: gitlabUser.Name})
+		//		apiProject := apiUser.Projects.GetFromFormat(context.Background(), &format.Project{Name: fixture.ProjectFormat.Name})
+		// options = f3_common.NewMirrorOptionsRecurse(apiUser, apiProject)
+		options = f3_common.NewMirrorOptionsRecurse(apiUser)
+		f3.Forge.Mirror(context.Background(), apiForge, options)
+
+		//
+		// Step 4: verify the fixture and F3 are equivalent
+		//
+		files := f3_util.Command(context.Background(), "find", f3.GetDirectory())
+		assert.Contains(t, files, fmt.Sprintf("/user/%d", gitlabUser.ID))
+	})
+}
--- a/tests/integration/integration_test.go
+++ b/tests/integration/integration_test.go
@ -35,6 +35,7 @@ import (
 	"code.gitea.io/gitea/modules/util"
 	"code.gitea.io/gitea/modules/web"
 	"code.gitea.io/gitea/routers"
+	"code.gitea.io/gitea/services/auth/source/f3"
 	"code.gitea.io/gitea/services/auth/source/oauth2"
 	user_service "code.gitea.io/gitea/services/user"
 	"code.gitea.io/gitea/tests"
@ -294,6 +295,21 @@ func authSourcePayloadOIDC(name string) map[string]string {
 	return payload
 }

+func createF3AuthSource(t *testing.T, name, url, matchingSource string) *auth.Source {
+	assert.NoError(t, auth.CreateSource(&auth.Source{
+		Type:     auth.F3,
+		Name:     name,
+		IsActive: true,
+		Cfg: &f3.Source{
+			URL:            url,
+			MatchingSource: matchingSource,
+		},
+	}))
+	source, err := auth.GetSourceByName(context.Background(), name)
+	assert.NoError(t, err)
+	return source
+}
+
 func createUser(ctx context.Context, t testing.TB, user *user_model.User) func() {
 	user.MustChangePassword = false
 	user.LowerName = strings.ToLower(user.Name)