Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
path: root/spec/lib/gitlab/auth_spec.rb
AgeCommit message (Collapse)Author
2017-06-08Instruct user to use a personal access token for Git over HTTPRobin Bobbitt
If internal auth is disabled and LDAP is not configured on the instance, present the user with a message to create a personal access token if his Git over HTTP auth attempt fails.
2017-06-06Fix test failuresZ.J. van de Weg
2017-06-05Create read_registry scope with JWT authZ.J. van de Weg
This is the first commit doing mainly 3 things: 1. create a new scope and allow users to use it 2. Have the JWTController respond correctly on this 3. Updates documentation to suggest usage of PATs There is one gotcha, there will be no support for impersonation tokens, as this seems not needed. Fixes gitlab-org/gitlab-ce#19219
2017-05-10Enable the Style/TrailingCommaInArguments copRémy Coutable
Use the EnforcedStyleForMultiline: no_comma option. Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-04-13Allow OAuth clients to push codeTimothy Andrew
- We currently support fetching code with username = 'oauth2' and password = <access_token>. - Trying to _push_ code with the same credentials fails with an authentication error. - There's no reason this shouldn't be enabled, especially since we allow the OAuth client to create deploy keys with push access: https://docs.gitlab.com/ce/api/deploy_keys.html#add-deploy-key
2017-03-07Merge branch 'siemens/gitlab-ce-feature/openid-connect'Sean McGivern
2017-03-07Merge remote-tracking branch ↵Douwe Maan
'origin/personal_access_token_api_and_impersonation_token'
2017-03-07Only use API scopes for personal access tokensMarkus Koller
2017-03-07Don't allow blocked users to authenticate through other meansMarkus Koller
Gitlab::Auth.find_with_user_password is currently used in these places: - resource_owner_from_credentials in config/initializers/doorkeeper.rb, which is used for the OAuth Resource Owner Password Credentials flow - the /session API call in lib/api/session.rb, which is used to reveal the user's current authentication_token In both cases users should only be authenticated if they're in the active state.
2017-03-06apply codestyle and implementation changes to the respective feature codeTiago Botelho
2017-03-06Remove unecessary calls to limit_user!, UniqueIps Middleware, and address MR ↵Pawel Chojnacki
review - cleanup formating in haml - clarify time window is in seconds - cleanup straneous chunks in db/schema - rename count_uniqe_ips to update_and_return_ips_count - other
2017-03-06Cleanup RSpec testsPawel Chojnacki
2017-03-06Test various login scenarios if the limit gets enforcedPawel Chojnacki
2017-03-01refactors finder and correlated codeTiago Botelho
2017-03-01add impersonation tokenSimon Vocella
2017-01-30Reduce hits to LDAP on Git HTTP auth by reordering auth mechanismsDrew Blessing
We accept half a dozen different authentication mechanisms for Git over HTTP. Fairly high in the list we were checking user password, which would also query LDAP. In the case of LFS, OAuth tokens or personal access tokens, we were unnecessarily hitting LDAP when the authentication will not succeed. This was causing some LDAP/AD systems to lock the account. Now, user password authentication is the last mechanism tried since it's the most expensive.
2016-12-16View-related (and other minor) changes to !5951 based on @rymai's review.Timothy Andrew
- The `scopes_form` partial can be used in the `admin/applications` view as well - Don't allow partials to access instance variables directly. Instead, pass in the instance variables as local variables, and use `local_assigns.fetch` to assert that the variables are passed in as expected. - Change a few instances of `render :partial` to `render` - Remove an instance of `required: false` in a view, since this is the default - Inline many instances of a local variable (`ip = 'ip'`) in `auth_spec`
2016-12-16Validate access token scopes in `Gitlab::Auth`Timothy Andrew
- This module is used for git-over-http, as well as JWT. - The only valid scope here is `api`, currently.
2016-09-28Handle LFS token creation and retrieval in the same method, and in the same ↵Patricio Cano
Redis connection. Reset expiry time of token, if token is retrieved again before it expires.
2016-09-19Fix test failureKamil Trzcinski
2016-09-19Revert "Revert all changes introduced by ↵Kamil Trzcinski
https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/6043" This reverts commit 6d43c95b7011ec7ec4600e00bdc8df76bb39813c.
2016-09-19Revert all changes introduced by ↵Kamil Trzcinski
https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/6043
2016-09-19Fix spec failuresKamil Trzcinski
2016-09-16Fix specs for available statusesKamil Trzcinski
2016-09-16Fix specs after renaming authentication_capabilitiesKamil Trzcinski
2016-09-16Rename capabilities to authentication_abilitiesKamil Trzcinski
2016-09-15Fix specs after merging LFS changesKamil Trzcinski
2016-09-15Merge remote-tracking branch 'origin/lfs-support-for-ssh' into per-build-tokenKamil Trzcinski
# Conflicts: # app/controllers/projects/git_http_client_controller.rb # app/helpers/lfs_helper.rb # lib/gitlab/auth.rb # spec/requests/lfs_http_spec.rb
2016-09-15Refactored authentication code to make it a bit clearer, added test for ↵Patricio Cano
wrong SSH key.
2016-09-15Use special characters for `lfs+deploy-key` to prevent a someone from ↵Patricio Cano
creating a user with this username, and method name refactoring.
2016-09-15Refactored LFS auth logic when using SSH to use its own API endpoint ↵Patricio Cano
`/lfs_authenticate` and added tests.
2016-09-15Refactor LFS token logic to use a Redis key instead of a DB field, making it ↵Patricio Cano
a 1 use only token.
2016-09-15Added LFS support to SSHPatricio Cano
- Required on the GitLab Rails side is mostly authentication and API related.
2016-09-15Add access specsKamil Trzcinski
2016-09-01Project tools visibility levelFelipe Artur
2016-08-09adds second batch of tests changed to active tensetiagonbotelho
2016-06-13Also rename "find" in the specsJacob Vosmaer
2016-06-10Improve Gitlab::Auth method namesJacob Vosmaer
Auth.find was a very generic name for a very specific method. Auth.find_in_gitlab_or_ldap was inaccurate in GitLab EE where it also looks in Kerberos.
2016-06-03Changes after more review from RémyJacob Vosmaer
2016-06-02Rename finder to find_in_gitlab_or_ldapJacob Vosmaer
2016-05-02Rubocop and whitespaceJacob Vosmaer
2016-04-29Make CI/Oauth/rate limiting reusableJacob Vosmaer
2015-12-09Tag lib specsDouwe Maan
2015-06-22Change `to_not` calls to `not_to`Robert Speicher
Both work, but now we're consistent across the entire app.
2015-06-22Update mock and stub syntax for specsRobert Speicher
2014-10-30Session API: Use case-insensitive authentication like in UIAndrey Krivko
2014-10-13Merge tests to support Multiple LDAP groupsJan-Willem van der Meer
2014-09-08Ensure Gitlab::LDAP::authentication is testedJan-Willem van der Meer
2014-09-08Refactor gitlab auth testsJan-Willem van der Meer
2014-08-29Move and rename ldap / oauth specsJan-Willem van der Meer
    generated by cgit v1.2.3 (git 2.25.1) at 2024-08-16 07:15:21 +0300