Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-06-08 | Merge branch 'password-min-length-placeholder' into 'master' | Robert Speicher | |
Added minimum password length to password field Add a placeholder to the password field in the register form with the minimum number of characters required. Also added a pattern to the field to stop it submitting if less than that. Closes #17765 See merge request !4458 | |||
2016-06-06 | Add a U2F-specific audit log entry after logging in. | Timothy Andrew | |
- "two-factor" for OTP-based 2FA - "two-factor-via-u2f-device" for U2F-based 2FA - "standard" for non-2FA login | |||
2016-06-06 | Implement authentication (login) using a U2F device. | Timothy Andrew | |
- Move the `authenticate_with_two_factor` method from `ApplicationController` to the `AuthenticatesWithTwoFactor` module, where it should be. | |||
2016-06-03 | Added minimum password length to password field | Phil Hughes | |
Closes #17765 | |||
2016-05-31 | Pass the "Remember me" value to the 2FA token form | Robert Speicher | |
Prior, if a user had 2FA enabled and checked the "Remember me" field, the setting was ignored because the OTP input was on a new form and the value was never passed. Closes #18000 | |||
2016-04-07 | Fix 2FA authentication spoofing vulnerability | Grzegorz Bizon | |
This commit attempts to change default user search scope if otp_user_id session variable has been set. If it is present, it means that user has 2FA enabled, and has already been verified with login and password. In this case we should look for user with otp_user_id first, before picking it up by login. | |||
2016-03-05 | Allow the initial admin to set a password | Robert Speicher | |
Closes #1980 | |||
2016-01-24 | Skip the 2FA requirement during logout | Robert Speicher | |
2015-12-28 | reCAPTCHA is configurable through Admin Settings, no reload needed. | Gabriel Mazetto | |
2015-12-27 | Add support for Google reCAPTCHA in user registration to prevent spammers | Stan Hu | |
2015-09-20 | Bump devise-two-factor to 2.0.0 | Robert Speicher | |
Addresses internal https://dev.gitlab.org/gitlab/gitlabhq/issues/2605 See https://github.com/tinfoil/devise-two-factor/pull/43 | |||
2015-09-02 | Crowd integration | Valery Sizov | |
2015-08-12 | Fix redirection after sign in when using auto_sign_in_with_provider | Alex Lossent | |
Logic for redirect path moved to a filter. | |||
2015-07-23 | Allow custom label to be set for authentication providers. | Douwe Maan | |
2015-07-06 | Audit log for user authentication | Valery Sizov | |
2015-06-19 | Use User#two_factor_enabled instead of otp_required_for_login | Robert Speicher | |
2015-05-29 | Add an option to automatically sign-in with an Omniauth provider without ↵ | Alex Lossent | |
showing the GitLab sign-in page This is useful when integrating with existing SSO environments and we want to use a single Omniauth provider for all user authentication. | |||
2015-05-14 | Refactor SessionsController to use a controller concern | Robert Speicher | |
2015-05-10 | Prevent "You are already signed in." error message upon 2FA login | Robert Speicher | |
2015-05-10 | Move "invalid 2FA code" error message to the flash | Robert Speicher | |
This makes it consistent with the Invalid email/password error message from the previous step. | |||
2015-05-10 | Refactor SessionsController | Robert Speicher | |
Also adds test case for providing an invalid 2FA code and then a valid one without re-entering username and password. | |||
2015-05-10 | Make two-factor login work and add a feature spec | Robert Speicher | |
2015-05-10 | Don't use hard-coded sign_in path | Robert Speicher | |
2015-05-10 | prepend_before_filter -> prepend_before_action | Robert Speicher | |
2015-05-10 | Add support for backup codes | Dmitriy Zaporozhets | |
2015-05-10 | Turn 2-factor authentication into 2 steps process. Disabled 2fa UI for ldap ↵ | Dmitriy Zaporozhets | |
users since it is not supported | |||
2015-04-08 | Upon successful login, clear `reset_password_token` field | Robert Speicher | |
Closes #1942 | |||
2015-01-08 | Improve application settings and write tests | Dmitriy Zaporozhets | |
2014-10-14 | Use Hash syntax for LDAP server declaration | Jan-Willem van der Meer | |
2014-10-13 | Add refactoring for multiple LDAP server support | Jan-Willem van der Meer | |
These changes are ported from EE to CE. Apply changes for app directory | |||
2014-07-28 | Only redirect to referrer from public GitLab pages | Jacob Vosmaer | |
2014-07-22 | Call store_location_for once. | Marin Jankovski | |
2014-07-21 | If the referer is not set, use fullpath. | Marin Jankovski | |
2014-07-11 | Use devise stored_location to redirect after signing for both public and ↵ | Marin Jankovski | |
private pages. |