Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
path: root/app/controllers/omniauth_callbacks_controller.rb
AgeCommit message (Collapse)Author
2023-08-18Add latest changes from gitlab-org/gitlab@16-3-stable-eev16.3.0-rc42GitLab Bot
2023-06-20Add latest changes from gitlab-org/gitlab@16-1-stable-eev16.1.0-rc42GitLab Bot
2023-05-17Add latest changes from gitlab-org/gitlab@16-0-stable-eev16.0.0-rc42GitLab Bot
2023-02-20Add latest changes from gitlab-org/gitlab@15-9-stable-eev15.9.0-rc42GitLab Bot
2023-01-18Add latest changes from gitlab-org/gitlab@15-8-stable-eev15.8.0-rc42GitLab Bot
2022-12-20Add latest changes from gitlab-org/gitlab@15-7-stable-eev15.7.0-rc42GitLab Bot
2022-10-20Add latest changes from gitlab-org/gitlab@15-5-stable-eev15.5.0-rc42GitLab Bot
2022-08-18Add latest changes from gitlab-org/gitlab@15-3-stable-eev15.3.0-rc42GitLab Bot
2022-06-20Add latest changes from gitlab-org/gitlab@15-1-stable-eev15.1.0-rc42GitLab Bot
2022-05-19Add latest changes from gitlab-org/gitlab@15-0-stable-eev15.0.0-rc42GitLab Bot
2021-12-20Add latest changes from gitlab-org/gitlab@14-6-stable-eev14.6.0-rc42GitLab Bot
2021-06-16Add latest changes from gitlab-org/gitlab@14-0-stable-eev14.0.0-rc42GitLab Bot
2021-05-19Add latest changes from gitlab-org/gitlab@13-12-stable-eev13.12.0-rc42GitLab Bot
2021-04-21Add latest changes from gitlab-org/gitlab@13-11-stable-eev13.11.0-rc43GitLab Bot
2020-10-21Add latest changes from gitlab-org/gitlab@13-5-stable-eev13.5.0-rc42GitLab Bot
2020-09-19Add latest changes from gitlab-org/gitlab@13-4-stable-eeGitLab Bot
2020-09-01Add latest changes from gitlab-org/security/gitlab@13-3-stable-eeGitLab Bot
2020-08-20Add latest changes from gitlab-org/gitlab@13-3-stable-eeGitLab Bot
2020-07-20Add latest changes from gitlab-org/gitlab@13-2-stable-eeGitLab Bot
2020-05-20Add latest changes from gitlab-org/gitlab@13-0-stable-eeGitLab Bot
2020-03-13Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-01-08Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-12-20Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-12-11Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-11-17Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-10-10Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-09-30Validate that SAML requests are originated from gitlabSebastian Arcila Valenzuela
If the request wasn't initiated by gitlab we shouldn't add the new identity to the user, and instead show that we weren't able to link the identity to the user. This should fix: https://gitlab.com/gitlab-org/gitlab-ce/issues/56509
2019-09-30Add checking for email_verified keyMałgorzata Ksionek
Fix rubocop offences and add changelog Add email_verified key for feature specs Add code review remarks Add code review remarks Fix specs
2019-09-13Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-07-26Ensure Warden triggers after_authentication callbackImre Farkas
By not triggering the callback: - ActiveSession lookup keys are not cleaned - Devise also misses its hook related to session cleanup
2019-05-06CE changes for SSO web enforcementJames Edwards-Jones
Adds two methods for us to extend in EE: - OmniauthCallbacksController#link_identity - GroupPolicy#lookup_access_level!
2019-04-08Externalize strings in flash messagesMartin Wortschack
- Externalize strings in controllers - Update PO file
2019-03-19Move out link\unlink ability checks to a policyPavel Shutsin
We can extend the policy in EE for additional behavior
2019-02-06Backport build_auth_user for GroupSAML callbackJames Edwards-Jones
2019-02-04Avoid CSRF check on SAML failure endpointJames Edwards-Jones
SAML and OAuth failures should cause a message to be presented, as well as logging that an attempt was made. These were incorrectly prevented by the CSRF check on POST endpoints such as SAML. In addition we were using a NullSession forgery protection, which made testing more difficult and could have allowed account linking to take place if a CSRF was ever needed but not present.
2019-01-10Addressing peer review feedback.Scott Escue
Replacing inline JS with ES 2015 functions included in pages/sessions/new. Also applying suggested server-side syntax improvements to OmniAuthCallbacksController.
2019-01-10Preserve URL fragment across sign-in and sign-up redirectsScott Escue
If window.location contains a URL fragment, append the fragment to all sign-in forms, the sign-up form, and all button based providers.
2018-09-19Enable frozen string in app/controllers/**/*.rbgfyoung
Enables frozen string for the following: * app/controllers/*.rb * app/controllers/admin/**/*.rb * app/controllers/boards/**/*.rb * app/controllers/ci/**/*.rb * app/controllers/concerns/**/*.rb Partially addresses #47424.
2018-06-25Honor saml assurance level to allow 2FA bypassingRoger Rüttimann
2018-06-21[Rails5] Force the `protect_from_forgery` callback run firstblackst0ne
Since Rails 5.0 the `protect_from_forgery` callback doesn't run first by default anymore. [1] Instead it gets inserted into callbacks chain where callbacks get called in order. This commit forces the callback to run first. [1]: https://github.com/rails/rails/commit/39794037817703575c35a75f1961b01b83791191
2018-05-21Backport helpers from GroupSAML failure messagesJames Edwards-Jones
2018-05-04Backport IdentityLinker#failed? from GroupSaml callback flowJames Edwards-Jones
2018-04-30Exclude LDAP from OmniauthCallbackController base methodsJames Edwards-Jones
2018-04-23Replace define_method with alias_method in Omniauth ControllersJames Edwards-Jones
2018-04-23Unify Saml::IdentityLinker and OAuth::IdentityLinkerJames Edwards-Jones
2018-04-23Show error on failed OAuth account linkJames Edwards-Jones
2018-04-23Refactor OmniauthCallbacksController to remove duplicationJames Edwards-Jones
Moves LDAP to its own controller with tests Provides path forward for implementing GroupSaml
2018-03-22Writes specsTiago Botelho
2018-03-22Tracks the number of failed attempts made by a user trying to authenticate ↵Tiago Botelho
with any external authentication method
2018-03-21Merge branch 'fix/auth0-unsafe-login-10-6' into 'security-10-6'James Lopez
[10.6] Fix GitLab Auth0 integration signs in the wrong user See merge request gitlab/gitlabhq!2354
generated by cgit v1.2.3 (git 2.25.1) at 2024-08-26 03:23:24 +0300