Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
path: root/spec/lib/gitlab/auth
AgeCommit message (Collapse)Author
2020-09-19Add latest changes from gitlab-org/gitlab@13-4-stable-eeGitLab Bot
2020-09-01Add latest changes from gitlab-org/security/gitlab@13-3-stable-eeGitLab Bot
2020-08-29Add latest changes from gitlab-org/security/gitlab@13-3-stable-eeGitLab Bot
2020-08-20Add latest changes from gitlab-org/gitlab@13-3-stable-eeGitLab Bot
2020-07-29Add latest changes from gitlab-org/gitlab@13-2-stable-eeGitLab Bot
2020-07-20Add latest changes from gitlab-org/gitlab@13-2-stable-eeGitLab Bot
2020-06-18Add latest changes from gitlab-org/gitlab@13-1-stable-eeGitLab Bot
2020-05-20Add latest changes from gitlab-org/gitlab@13-0-stable-eeGitLab Bot
2020-04-03Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-04-01Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-03-27Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-03-19Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-03-13Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-03-12Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-03-02Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-02-05Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-02-04Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-02-04Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-01-27Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-01-22Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-01-09Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-12-17Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-12-12Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-12-11Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-12-07Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-12-06Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-12-04Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-11-11Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-11-01Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-10-10Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-09-30Validate that SAML requests are originated from gitlabSebastian Arcila Valenzuela
If the request wasn't initiated by gitlab we shouldn't add the new identity to the user, and instead show that we weren't able to link the identity to the user. This should fix: https://gitlab.com/gitlab-org/gitlab-ce/issues/56509
2019-09-26Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-09-10Enable serving static objects from an external storageAhmad Sherif
It consists of two parts: 1. Redirecting users to the configured external storage 1. Allowing the external storage to request the static object(s) on behalf of the user by means of specific tokens Part of https://gitlab.com/gitlab-com/gl-infra/infrastructure/issues/6829
2019-08-27Update docs and comments about saml with allow_bypass_two_factordodocat
allow_bypass_two_factor configration dose not work with saml provider
2019-07-26Fix cannot modify frozen stringThong Kuah
Note that Performance/UnfreezeString recommends unary plus over "".dup, but unary plus has lower precedence so we have to use parenthesis
2019-07-26Add frozen_string_literal to spec/lib (part 1)Thong Kuah
Using the sed script from https://gitlab.com/gitlab-org/gitlab-ce/issues/59758
2019-07-25Frozen string cannot change encodingThong Kuah
This was shown in specs but surely this will be happening in application code as well if this method is passes a frozen string. We were also trying to force_encode a OmniAuth::AuthHash which had the very confusing behaviour of returning nil when it was sent a method that it did not define. Fix that by only force_encoding a String.
2019-07-22OAuth2 support for GitLab personal access tokensSteve Abrams
PATs are accepted using the OAuth2 compliant header "Authorization: Bearer {token}" in order to allow for OAuth requests while 2FA is enabled.
2019-06-28Support CIDR notation in IP rate limiterStan Hu
This will make it possible to whitelist multiple IP addresses (e.g. 192.168.0.1/24).
2019-03-25Backport 'Update user name upon LDAP sync' from EERémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2019-03-04Allow raw `tls_options` to be passed in LDAP configurationDrew Blessing
We've previously exposed ca_file and ssl_version but there are many possible options that can be used inside tls_options. Instead of exposing individual ones, simply expose the entire hash so it can be passed in and we won't have to add things in the future.
2019-01-24Enable the Layout/ExtraSpacing copRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2019-01-07Switch use of Rack::Request to ActionDispatch::RequestStan Hu
As mentioned in https://gitlab.com/gitlab-org/gitlab-ee/issues/9035#note_129093444, Rails 5 switched ActionDispatch::Request so that it no longer inherits Rack::Request directly. A middleware that uses Rack::Request to read the environment may see stale request parameters if another middleware modifies the environment via ActionDispatch::Request. To be safe, we should be using ActionDispatch::Request everywhere.
2018-11-29Add config to disable impersonationImre Farkas
Adds gitlab.impersonation_enabled config option defaulting to true to keep the current default behaviour. Only the act of impersonation is modified, impersonation token management is not affected.
2018-11-29Merge branch 'security-fix-pat-web-access' into 'master'Cindy Pallares
[master] Resolve "Personal access token with only `read_user` scope can be used to authenticate any web request" See merge request gitlab/gitlabhq!2583
2018-11-21Eliminate duplicated wordsTakuya Noguchi
Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
2018-10-25saml/auth_hash: Allow 2FA bypass for SAML 2.0 responses115100
Closes gitlab-org/gitlab-ce/#53102.
2018-09-21Correct Gitlab Capitalization in code filesMarcel Amirault
2018-08-23Backport LDAP changes to CEDouglas Barbosa Alexandre
2018-08-22Fix broken Git over HTTP clones with LDAP usersStan Hu
Due to a regression in !20608, the LDAP authenticator was not being used unless OmniAuth was enabled. This change allows the LDAP provider to be used if it is configured regardless of the OmniAuth setting. Closes #50579
generated by cgit v1.2.3 (git 2.25.1) at 2024-09-02 02:17:39 +0300