Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
path: root/lib/gitlab/auth
AgeCommit message (Collapse)Author
2018-11-29Add config to disable impersonationImre Farkas
Adds gitlab.impersonation_enabled config option defaulting to true to keep the current default behaviour. Only the act of impersonation is modified, impersonation token management is not affected.
2018-11-29Merge branch 'security-fix-pat-web-access' into 'master'Cindy Pallares
[master] Resolve "Personal access token with only `read_user` scope can be used to authenticate any web request" See merge request gitlab/gitlabhq!2583
2018-11-20Merge branch 'fix/allow-saml2-for-2fa-bypass' into 'master'Douwe Maan
saml/auth_hash: Allow 2FA bypass for SAML 2.0 responses See merge request gitlab-org/gitlab-ce!22568
2018-11-01Fix typos in comments and specsGeorge Tsiolis
2018-10-29[master] Persist only SHA digest of PersonalAccessToken#tokenImre Farkas
2018-10-25saml/auth_hash: Allow 2FA bypass for SAML 2.0 responses115100
Closes gitlab-org/gitlab-ce/#53102.
2018-10-13Enable some frozen string in lib/gitlabgfyoung
Enable frozen string for the following files: * lib/gitlab/auth/**/*.rb * lib/gitlab/badge/**/*.rb * lib/gitlab/bare_repository_import/**/*.rb * lib/gitlab/bitbucket_import/**/*.rb * lib/gitlab/bitbucket_server_import/**/*.rb * lib/gitlab/cache/**/*.rb * lib/gitlab/checks/**/*.rb Partially addresses #47424.
2018-09-21Correct Gitlab Capitalization in code filesMarcel Amirault
2018-09-11Disable existing offenses for the CodeReuse copsYorick Peterse
This whitelists all existing offenses for the various CodeReuse cops, of which most are triggered by the CodeReuse/ActiveRecord cop.
2018-08-23Backport LDAP changes to CEDouglas Barbosa Alexandre
2018-08-22Fix broken Git over HTTP clones with LDAP usersStan Hu
Due to a regression in !20608, the LDAP authenticator was not being used unless OmniAuth was enabled. This change allows the LDAP provider to be used if it is configured regardless of the OmniAuth setting. Closes #50579
2018-08-03Improve blocked user tracking code readabilityGrzegorz Bizon
2018-08-02Remove an empty line from blocker user tracker classGrzegorz Bizon
2018-08-02Remove an empty line from the end of blocked_user_tracker.rbGrzegorz Bizon
2018-08-01Improve authentication events-related code readabilityGrzegorz Bizon
2018-08-01Simplify blocked user tracking during authenticationGrzegorz Bizon
2018-08-01Improve blocked user tracking and fire some events only onceGrzegorz Bizon
2018-07-31Merge branch 'feature/gb/login-activity-metrics' into 'master'Sean McGivern
Add user authentication activity metrics Closes #47789 See merge request gitlab-org/gitlab-ce!20668
2018-07-31Improve authentication activity code readabilityGrzegorz Bizon
2018-07-27Improve specs for blocked user tracker classGrzegorz Bizon
2018-07-27Add authentication metrics for sessionless sign inGrzegorz Bizon
2018-07-27Improve readability and move custom matchers to better placeGrzegorz Bizon
2018-07-27Catch custom warden events too to increment metricsGrzegorz Bizon
2018-07-26Make authentication metrics events explicit is specsGrzegorz Bizon
2018-07-24Fix activity metric name that need to be symbolsGrzegorz Bizon
2018-07-23Make it easier to stub authentication metricsGrzegorz Bizon
2018-07-23Track blocked users and two factor authenticationsGrzegorz Bizon
2018-07-20Refactor blocked user tracker classGrzegorz Bizon
2018-07-20Add custom expectations for authentication activity metricsGrzegorz Bizon
2018-07-20Disable SAML if OmniAuth is disabledLin Jen-Shin
We also try to unify the way we setup OmniAuth, and how we check if it's enabled or not.
2018-07-19Rename authentication activity observer methodsGrzegorz Bizon
2018-07-17Implement scaffold of authentication activity metricsGrzegorz Bizon
2018-07-09Updates from `rubocop -a`Lin Jen-Shin
2018-06-25Honor saml assurance level to allow 2FA bypassingRoger Rüttimann
2018-05-31Export assigned issues in iCalendar feedImre Farkas
2018-05-24Add username to terms message in git and API callsBob Van Landuyt
This will make it clearer to users which account is being used to make the API/git call. So they know which account needs to be used to accept the terms. Closes #46649
2018-05-18Minimize CE/EE difference in Gitlab::Auth::LDAP::ConfigRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2018-05-18Minimize CE/EE difference in Gitlab::Auth::LDAP::AccessRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2018-05-18Minimize CE/EE difference in Gitlab::Auth::UserAuthFindersRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2018-05-18Minimize CE/EE difference in Gitlab::Auth::Saml::UserRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2018-05-18Minimize CE/EE difference in Gitlab::Auth::Saml::ConfigRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2018-05-13Fix system hook not firing for blocked users when LDAP sign-in is usedStan Hu
An LDAP sign-in request results in a different request parameter than a standard GitLab sign-in. Since Warden doesn't pass us the user that was blocked, we first search for a `username` in the request parameters and then look for `user.login`. Closes #46307
2018-05-10Block access to API & git when terms are enforcedBob Van Landuyt
When terms are enforced, but the user has not accepted the terms access to the API & git is rejected with a message directing the user to the web app to accept the terms.
2018-05-04Backport IdentityLinker#failed? from GroupSaml callback flowJames Edwards-Jones
2018-04-23Auth::User classes refactor adds should_save?James Edwards-Jones
2018-04-23Replace define_method with alias_method in Omniauth ControllersJames Edwards-Jones
2018-04-23Unify Saml::IdentityLinker and OAuth::IdentityLinkerJames Edwards-Jones
2018-04-23Show error on failed OAuth account linkJames Edwards-Jones
2018-04-23Refactor OmniauthCallbacksController to remove duplicationJames Edwards-Jones
Moves LDAP to its own controller with tests Provides path forward for implementing GroupSaml
2018-04-04Add better LDAP connection handlingFrancisco Javier López
generated by cgit v1.2.3 (git 2.25.1) at 2024-08-17 11:37:10 +0300