summaryrefslogtreecommitdiff
path: root/lib/gitlab/auth.rb
Commit message (Expand)AuthorAgeFilesLines
* use Gitlab::UserSettings directly as a singleton instead of including/extendi...Mario de la Ossa2018-02-021-4/+2
* Merge branch 'dm-fix-registry-with-sudo-token' into 'master'Sean McGivern2017-11-241-15/+10
|\
| * Fix pulling and pushing using a personal access token with the sudo scopedm-fix-registry-with-sudo-tokenDouwe Maan2017-11-231-15/+10
* | Allow password authentication to be disabled entirelyMarkus Koller2017-11-231-4/+10
|/
* Fix Error 500 when pushing LFS objects with a write deploy keyStan Hu2017-11-081-4/+11
* Add sudo API scopeDouwe Maan2017-11-021-3/+5
* Consistently use PersonalAccessToken instead of PersonalTokenDouwe Maan2017-11-021-4/+4
* Clean up read_registry scope changesRobin Bobbitt2017-09-181-7/+17
* Merge branch 'hide-read-registry-scope-when-registry-disabled' into 'master'Kamil Trzciński2017-09-121-1/+1
|\
| * Hide read_registry scope when registry is disabled on instanceRobin Bobbitt2017-08-211-1/+1
* | Merge branch '37202-revert-changes-to-signing-enabled' into 'master'Douwe Maan2017-09-011-4/+0
|\ \
| * | Rollsback changes made to signing_enabled.Tiago Botelho2017-09-011-4/+0
* | | `current_application_settings` belongs on `Gitlab::CurrentSettings`Sean McGivern2017-08-311-0/+2
|/ /
* | Whitelist or fix additional `Gitlab/PublicSend` cop violationsrs-more-public-send-whitelistsRobert Speicher2017-08-141-2/+2
|/
* Cleanup tests and add admin_container_image toLin Jen-Shin2017-08-021-1/+2
* Fixes needed when GitLab sign-in is not enabledRobin Bobbitt2017-07-131-1/+5
* `AccessTokenValidationService` accepts `String` or `API::Scope` scopes.Timothy Andrew2017-06-301-1/+0
* Extract a `Gitlab::Scope` class.Timothy Andrew2017-06-291-2/+2
* Implement review comments from @DouweM for !12300.Timothy Andrew2017-06-281-2/+3
* Fix remaining spec failures for !12300.Timothy Andrew2017-06-281-2/+2
* Instruct user to use a personal access token for Git over HTTPRobin Bobbitt2017-06-071-1/+5
* Fix test failureszj-read-registry-patZ.J. van de Weg2017-06-061-16/+23
* Create read_registry scope with JWT authZ.J. van de Weg2017-06-051-14/+28
* Avoid resource intensive login checks if password is not providedHoratiu Eugen Vlad2017-05-211-1/+4
* Allow OAuth clients to push code30305-oauth-token-push-codeTimothy Andrew2017-04-131-1/+1
* Merge branch 'siemens/gitlab-ce-feature/openid-connect'Sean McGivern2017-03-071-3/+11
|\
| * Require explicit scopes on personal access tokensMarkus Koller2017-03-071-1/+4
| * Only use API scopes for personal access tokensMarkus Koller2017-03-071-2/+7
| * Don't allow blocked users to authenticate through other meansMarkus Koller2017-03-071-1/+1
| * Implement OpenID Connect identity providerMarkus Koller2017-03-071-1/+1
* | Merge remote-tracking branch 'origin/personal_access_token_api_and_impersonat...Douwe Maan2017-03-071-12/+7
|\ \ | |/ |/|
| * apply codestyle and implementation changes to the respective feature codepersonal_access_token_api_and_impersonation_tokenTiago Botelho2017-03-061-1/+1
| * refactors finder and correlated codeTiago Botelho2017-03-011-1/+1
| * applies relevant changes to the code and code structureTiago Botelho2017-02-281-2/+2
| * add impersonation tokenSimon Vocella2017-02-281-12/+7
* | Remove unecessary calls to limit_user!, UniqueIps Middleware, and address MR ...Pawel Chojnacki2017-03-061-2/+1
* | Test various login scenarios if the limit gets enforcedPawel Chojnacki2017-03-061-1/+1
* | Allow limiting logging in users from too many different IPs.Pawel Chojnacki2017-03-061-9/+13
* | Enable and autocorrect the CustomErrorClass copSean McGivern2017-03-011-1/+1
|/
* Enable Style/MutableConstantDouwe Maan2017-02-231-2/+2
* Reduce hits to LDAP on Git HTTP auth by reordering auth mechanismsDrew Blessing2017-01-301-3/+8
* Rename the `token_has_scope?` method.Timothy Andrew2016-12-161-3/+3
* Convert AccessTokenValidationService into a class.Timothy Andrew2016-12-161-1/+1
* Refactor access token validation in `Gitlab::Auth`Timothy Andrew2016-12-161-2/+10
* Implement minor changes from @dbalexandre's review.Timothy Andrew2016-12-161-1/+0
* Validate access token scopes in `Gitlab::Auth`Timothy Andrew2016-12-161-3/+11
* Calls to the API are checked for scope.Timothy Andrew2016-12-161-0/+4
* Handle LFS token creation and retrieval in the same method, and in the same R...lfs-ssh-authorization-fixPatricio Cano2016-09-281-1/+1
* Use early return in lfs_token_checkKamil Trzcinski2016-09-201-10/+10
* Revert "Revert all changes introduced by https://gitlab.com/gitlab-org/gitlab...lfs-supportKamil Trzcinski2016-09-191-0/+25
View Lorry Controller Status