summaryrefslogtreecommitdiff
path: root/lib/api/helpers.rb
Commit message (Expand)AuthorAgeFilesLines
* Move all API authentication code to APIGuardDouwe Maan2017-10-121-51/+1
* Send API parameters as extra data for sentry errorsapi-sentry-extraAlejandro Rodríguez2017-10-051-1/+1
* Ensure no exception is raised when Raven tries to get the current user in API...38571-fix-exception-in-raven-reportRémy Coutable2017-09-291-3/+5
* Make sure API responds with 401 when invalid authentication info is provideddm-api-unauthorizedDouwe Maan2017-09-281-10/+20
* Make Members with Owner and Master roles always able to create subgroups30473-allow-creation-of-subgroups-with-gitlab_default_can_create_group-set-to-falseRuben Davila2017-09-071-1/+1
* Merge branch 'wiki_api' into 'master'Grzegorz Bizon2017-09-071-0/+6
|\
| * Add API support for wiki pagesblackst0ne2017-09-071-0/+6
* | Respond with a bad request if artifact path is invalidGrzegorz Bizon2017-09-061-1/+1
* | Extract job artifacts API code to a separate fileGrzegorz Bizon2017-09-061-0/+12
* | Use API helper to send artifact file through WorkhorseGrzegorz Bizon2017-09-051-0/+4
* | Don't use public_send in destroy_conditionally! helperSean McGivern2017-08-301-2/+4
* | Update remaining endpointsRobert Schilling2017-08-281-1/+1
* | Conditionally destroy a ressourceRobert Schilling2017-08-281-3/+14
* | API: Respect the 'If-Unmodified-Since' for delete endpointsRobert Schilling2017-08-281-0/+8
|/
* Upgrade grape to 1.0Zeger-Jan van de Weg2017-08-161-1/+1
* Show error message for API 500 error in tests, andLin Jen-Shin2017-08-111-1/+9
* Do not validate CSRF token in API unless neededdm-api-current-userDouwe Maan2017-08-021-0/+2
* Rescue only from ActionController::InvalidAuthenticityTokenDouwe Maan2017-07-261-2/+2
* Add `rescue false`.blackst0ne2017-07-261-1/+1
* Refactor CSRF protectionblackst0ne2017-07-261-30/+2
* Add CSRF token verification to APIblackst0ne2017-07-261-4/+34
* Add group milestones API endpointissue_34622Felipe Artur2017-07-211-0/+4
* Add user projects APIvanadium232017-07-061-1/+2
* Implement review comments from @dbalexandre for !12300.Timothy Andrew2017-06-281-2/+2
* When verifying scopes, manually include scopes from `API::API`.Timothy Andrew2017-06-281-4/+19
* Allow API scope declarations to be applied conditionally.Timothy Andrew2017-06-281-1/+1
* Initial attempt at refactoring API scope declarations.Timothy Andrew2017-06-281-2/+4
* Enable the Style/PreferredHashMethods coprc/enable-PreferredHashMethods-copRémy Coutable2017-06-021-1/+1
* Add missing specsKamil Trzcinski2017-06-011-0/+10
* Add :owned param to ProjectFinderToon Claes2017-05-301-5/+2
* Use helper to construct Finder paramsToon Claes2017-05-301-0/+10
* Use ProjectFinder to filter the projectsToon Claes2017-05-301-13/+0
* Handle `membership` in ProjectFinderToon Claes2017-05-301-4/+0
* Merge branch '27144-enforce-rubocop-trailing_commas-no_comma-style' into 'mas...Robert Speicher2017-05-101-1/+1
|\
| * Enable the Style/TrailingCommaInArguments copRémy Coutable2017-05-101-1/+1
* | Use new SnippetsFinder signature in APIbvl-security-patchesBob Van Landuyt2017-05-101-2/+2
|/
* Allow admins to sudo to blocked users.29505-allow-admins-sudo-to-blocked-usersTimothy Andrew2017-04-261-1/+1
* Remove the User#is_admin? methodblackst0ne2017-04-091-2/+2
* API: Make the /notes endpoint work with noteable iid instead of idToon Claes2017-03-271-0/+5
* use the policy stack to protect loginshttp://jneen.net/2017-03-091-1/+1
* use a magic default :global symbol instead of nilhttp://jneen.net/2017-03-091-2/+2
* API routes referencing a specific merge request should use the MR `iid`Timothy Andrew2017-03-071-4/+4
* API routes referencing a specific issue should use the issue `iid`Timothy Andrew2017-03-071-2/+2
* Test various login scenarios if the limit gets enforcedPawel Chojnacki2017-03-061-7/+8
* Remove "subscribed" field from API responses returning list of issues or merg...api-drop-subscribedAdam Niedzielski2017-03-061-8/+0
* Rename query parameter to `membership`28865-filter-by-authorized-projects-in-v4Toon Claes2017-03-031-1/+1
* Add filter param for authorized projects for current_user for V4Oswaldo Ferreira2017-03-031-0/+4
* Enable filtering milestones by search criteria in the APIMark Fletcher2017-03-021-0/+4
* Return 202 with JSON body on async removals on V4 API3874-correctly-return-json-on-delete-responsesOswaldo2017-02-231-0/+4
* Enable Style/MutableConstantDouwe Maan2017-02-231-1/+1