Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-04-25 | Fix OAuth, LDAP and SAML SSO when regular sign-ups are disabled | Douwe Maan | |
2017-04-13 | Implement Users::BuildService | geoandri | |
2017-03-27 | Implement new service for creating user | George Andrinopoulos | |
2017-03-01 | Enable and autocorrect the CustomErrorClass cop | Sean McGivern | |
2017-02-23 | Fix OAuth/SAML user blocking behavior | Douwe Maan | |
2017-02-23 | Update rubocop and rubocop-rspec and regenerate .rubocop_todo.yml | Douwe Maan | |
2016-11-30 | Improve the `Gitlab::OAuth::User` error message | Drew Blessing | |
The error saving the user is logged to application.log. Previously, the entry had no context and was unusable - 'Error saving user: [Email address already taken]'. Adding the auth hash UID and email makes the error more helpful. | |||
2016-11-11 | Omniauth auto link LDAP user falls back to find by DN when user cannot be ↵ | Drew Blessing | |
found by uid | |||
2016-07-02 | Merge branch 'master' into dev-master | Tomasz Maczukin | |
* master: (98 commits) Enable Style/EmptyLines cop, remove redundant ones Update CHANGELOG Cache results from jQuery selectors to retrieve namespace name Fix import button when import fail due the namespace already been taken Fix snippets comments not displayed Fix emoji paths in relative root configurations Exclude requesters from Project#members, Group#members and User#members Upgrade Thin from 1.6.1 to 1.7.0. Many squashed commits Cache autocomplete results Upgrade Sidekiq from 4.1.2 to 4.1.4. Upgrade seed-fu from 2.3.5 to 2.3.6 use has_many relationship with events Support creating a todo on issuables via API Expose target, filter by state as string Add todos API documentation and changelog Improve the request / withdraw access button Metrics for Rouge::Plugins::Redcarpet and Rouge::Formatters::HTMLGitlab Groundwork for Kerberos SPNEGO (EE feature) Update CHANGELOG 8.9.5 for runners related fixes ... | |||
2016-06-29 | Fixed privilege escalation issue where manually set external users would be ↵ | Patricio Cano | |
reverted back to internal users if they logged in via OAuth and that provider was not in the `external_providers` list. | |||
2016-06-29 | Enable Style/SpaceAfterComma Rubocop cop | Grzegorz Bizon | |
2016-06-23 | Fix subsequent SAML sign ins | Drew Blessing | |
2016-06-09 | Syntax fixes and better logging around the `ldap_person` method. | Patricio Cano | |
2016-06-07 | Moved `find_or_create_ldap_user` method to parent class and added logging. | Patricio Cano | |
2016-06-07 | Adjust the SAML control flow to allow LDAP identities to be added to an ↵ | Patricio Cano | |
existing SAML user. | |||
2016-04-12 | Better control flow. | Patricio Cano | |
2016-04-11 | Allow `external_providers` for Omniauth to be defined to mark these users as ↵ | Patricio Cano | |
external | |||
2016-02-19 | Make new `allow_single_sign_on` feature backwards compatible | Patricio Cano | |
2016-02-19 | Decouple SAML authentication from the default Omniauth logic | Patricio Cano | |
2016-02-19 | Revert "Merge branch 'saml-decoupling' into 'master' " | Douwe Maan | |
This reverts commit c04e22fba8d130a58f498ff48127712d7dae17ee, reversing changes made to 0feab326d52222dc0ab5bd0a6b15dab297f44aa9. | |||
2016-02-18 | Decouple SAML authentication from the default Omniauth logic | Patricio Cano | |
2016-01-19 | Allow LDAP users to change their email if it was not set by the LDAP server | Douwe Maan | |
2016-01-15 | Fix signup for some OAuth providers | Steffen Köhler | |
some OAuth providers (kerberos for example) only provide a username and an email, but no name. Therefore a signup fails because the name is empty. Best guess for the name is probably the username, therefore use it as name. | |||
2015-12-22 | Fix identity and user retrieval when special characters are used | Patricio Cano | |
2015-12-15 | add CAS authentication support | tduehr | |
2015-12-11 | AuthHash should not parameterize email user | Corey Hinshaw | |
2015-11-03 | Use proper labels for OAuth providers | Douwe Maan | |
2015-09-09 | Shuffle config around a bit | Douwe Maan | |
2015-09-08 | Allow configuration of LDAP attributes GitLab will use for the new user account. | Douwe Maan | |
2015-08-18 | Fix infinite loop when SAML was incorrectly configured. | Douwe Maan | |
2015-07-23 | Allow custom label to be set for authentication providers. | Douwe Maan | |
2015-06-22 | Make provider a select for identities form in admin area | Dmitriy Zaporozhets | |
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | |||
2015-06-17 | Fix behavior of ldap_person method in Gitlab::OAuth::User | Alex Lossent | |
Code tweaks in 45e9150a caused the ldap_person method to not return expected results. Improved tests to cover the ldap_person method, which was previously stubbed. | |||
2015-06-05 | Tweak code. | Douwe Maan | |
2015-06-03 | Add option to automatically link omniauth and LDAP identities | Alex Lossent | |
Until now, a user needed to first sign in with his LDAP identity and then manually link his/her account with an omniauth identity from their profile. Only when this is done can the user authenticate with the omniauth provider and at the same time benefit from the LDAP integration (HTTPS authentication with LDAP username/password and in EE: LDAP groups, SSH keys etc.). This feature automates the process by looking up a corresponding LDAP person when a user connects with omniauth for the first time and then automatically linking the LDAP and omniauth identities (of course, like the existing allow_single_sign_on setting, this is meant to be used with trusted omniauth providers). The result is identical to a manual account link. Add config initializers for other omniauth settings. | |||
2015-05-13 | Improve OAuth signup error message. | Douwe Maan | |
2015-05-03 | add common method to force utf8 and force oauth properties to be utf8 | Onur Küçük | |
2015-04-09 | Move lib/gitlab/oauth to lib/gitlab/o_auth | Robert Speicher | |
Lets Rails autoload these files by name |