Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Validate session key when authorizing with GCP to create a cluster | Tiger | 2019-02-19 | 1 | -11/+21 |
| | | | | | | | | | | It was previously possible to link a GCP account to another user's GitLab account by having them visit the callback URL, as there was no check that they were the initiator of the request. We now reject the callback unless the state parameter matches the one added to the initiating user's session. | ||||
* | Enable more frozen string in app/controllers/ | gfyoung | 2018-09-23 | 1 | -0/+2 |
| | | | | | | | | | | | | | | | | Enables frozen string for the following: * app/controllers/dashboard/**/*.rb * app/controllers/explore/**/*.rb * app/controllers/google_api/**/*.rb * app/controllers/groups/**/*.rb * app/controllers/import/**/*.rb * app/controllers/instance_statistics/**/*.rb * app/controllers/ldap/**/*.rb * app/controllers/oauth/**/*.rb * app/controllers/profiles/**/*.rb Partially addresses #47424. | ||||
* | Improve redirect uri state and fix all remaining tests | Kamil Trzcinski | 2017-10-06 | 1 | -6/+11 |
| | |||||
* | Security fix: redirection in google_api/authorizations_controller | Shinya Maeda | 2017-10-06 | 1 | -2/+7 |
| | |||||
* | Change `/google_api/authorizations/` to `/google_api/auth/`. | Kamil Trzcinski | 2017-10-05 | 1 | -1/+1 |
| | |||||
* | authorizations_controller_spec. cluster_policy_spec. | Shinya Maeda | 2017-10-05 | 1 | -2/+2 |
| | |||||
* | Use expires_in for access_token validation | Shinya Maeda | 2017-10-02 | 1 | -3/+7 |
| | |||||
* | Replace reactive_cache by multipel sidekiq workers | Shinya Maeda | 2017-10-01 | 1 | -3/+3 |
| | |||||
* | Databse foreing key, index, encrypt password. Use short path. Improve error ↵ | Shinya Maeda | 2017-09-29 | 1 | -2/+0 |
| | | | | handling. Polish. | ||||
* | ok | Shinya Maeda | 2017-09-26 | 1 | -15/+5 |
| | |||||
* | Create Kubernetes cluster on GKE from k8s service | Shinya Maeda | 2017-09-25 | 1 | -0/+27 |