- 08 Jun, 2017 1 commit
-
-
Robin Bobbitt authored
If internal auth is disabled and LDAP is not configured on the instance, present the user with a message to create a personal access token if his Git over HTTP auth attempt fails.
-
- 06 Jun, 2017 1 commit
-
-
Z.J. van de Weg authored
-
- 05 Jun, 2017 1 commit
-
-
Z.J. van de Weg authored
This is the first commit doing mainly 3 things: 1. create a new scope and allow users to use it 2. Have the JWTController respond correctly on this 3. Updates documentation to suggest usage of PATs There is one gotcha, there will be no support for impersonation tokens, as this seems not needed. Fixes gitlab-org/gitlab-ce#19219
-
- 10 May, 2017 1 commit
-
-
Rémy Coutable authored
Use the EnforcedStyleForMultiline: no_comma option. Signed-off-by: Rémy Coutable <remy@rymai.me>
-
- 13 Apr, 2017 1 commit
-
-
Timothy Andrew authored
- We currently support fetching code with username = 'oauth2' and password = <access_token>. - Trying to _push_ code with the same credentials fails with an authentication error. - There's no reason this shouldn't be enabled, especially since we allow the OAuth client to create deploy keys with push access: https://docs.gitlab.com/ce/api/deploy_keys.html#add-deploy-key
-
- 07 Mar, 2017 2 commits
-
-
Markus Koller authored
-
Markus Koller authored
Gitlab::Auth.find_with_user_password is currently used in these places: - resource_owner_from_credentials in config/initializers/doorkeeper.rb, which is used for the OAuth Resource Owner Password Credentials flow - the /session API call in lib/api/session.rb, which is used to reveal the user's current authentication_token In both cases users should only be authenticated if they're in the active state.
-
- 06 Mar, 2017 4 commits
-
-
Tiago Botelho authored
-
Pawel Chojnacki authored
- cleanup formating in haml - clarify time window is in seconds - cleanup straneous chunks in db/schema - rename count_uniqe_ips to update_and_return_ips_count - other
-
Pawel Chojnacki authored
-
Pawel Chojnacki authored
-
- 01 Mar, 2017 1 commit
-
-
Tiago Botelho authored
-
- 28 Feb, 2017 1 commit
-
-
Simon Vocella authored
-
- 23 Feb, 2017 4 commits
-
-
Douwe Maan authored
This reverts commit e00fb2bdc2090e9cabeb1eb35a2672a882cc96e9. # Conflicts: # .rubocop.yml # .rubocop_todo.yml # lib/gitlab/ci/config/entry/global.rb # lib/gitlab/ci/config/entry/jobs.rb # spec/lib/gitlab/ci/config/entry/factory_spec.rb # spec/lib/gitlab/ci/config/entry/global_spec.rb # spec/lib/gitlab/ci/config/entry/job_spec.rb # spec/lib/gitlab/ci/status/build/factory_spec.rb # spec/lib/gitlab/incoming_email_spec.rb
-
Douwe Maan authored
This reverts commit cb10b725c8929b8b4460f89c9d96c773af39ba6b.
-
Douwe Maan authored
-
Douwe Maan authored
-
- 30 Jan, 2017 1 commit
-
-
Drew Blessing authored
We accept half a dozen different authentication mechanisms for Git over HTTP. Fairly high in the list we were checking user password, which would also query LDAP. In the case of LFS, OAuth tokens or personal access tokens, we were unnecessarily hitting LDAP when the authentication will not succeed. This was causing some LDAP/AD systems to lock the account. Now, user password authentication is the last mechanism tried since it's the most expensive.
-
- 16 Dec, 2016 2 commits
-
-
Timothy Andrew authored
- The `scopes_form` partial can be used in the `admin/applications` view as well - Don't allow partials to access instance variables directly. Instead, pass in the instance variables as local variables, and use `local_assigns.fetch` to assert that the variables are passed in as expected. - Change a few instances of `render :partial` to `render` - Remove an instance of `required: false` in a view, since this is the default - Inline many instances of a local variable (`ip = 'ip'`) in `auth_spec`
-
Timothy Andrew authored
- This module is used for git-over-http, as well as JWT. - The only valid scope here is `api`, currently.
-
- 28 Sep, 2016 1 commit
-
-
Patricio Cano authored
Reset expiry time of token, if token is retrieved again before it expires.
-
- 19 Sep, 2016 4 commits
-
-
Kamil Trzcinski authored
-
Kamil Trzcinski authored
Revert "Revert all changes introduced by https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/6043" This reverts commit 6d43c95b.
-
Kamil Trzcinski authored
-
- 16 Sep, 2016 3 commits
-
-
Kamil Trzcinski authored
-
Kamil Trzcinski authored
-
Kamil Trzcinski authored
-
- 15 Sep, 2016 8 commits
-
-
Patricio Cano authored
-
Kamil Trzcinski authored
-
Patricio Cano authored
-
Patricio Cano authored
Use special characters for `lfs+deploy-key` to prevent a someone from creating a user with this username, and method name refactoring.
-
Patricio Cano authored
Refactored LFS auth logic when using SSH to use its own API endpoint `/lfs_authenticate` and added tests.
-
Patricio Cano authored
-
Patricio Cano authored
- Required on the GitLab Rails side is mostly authentication and API related.
-
Kamil Trzcinski authored
-
- 01 Sep, 2016 1 commit
-
-
Felipe Artur authored
-
- 09 Aug, 2016 1 commit
-
-
tiagonbotelho authored
-
- 16 Jun, 2016 2 commits
-
-
James Lopez authored
This reverts commit 13e37a3e.
-
James Lopez authored
-