Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Disable SAML if OmniAuth is disabled48932-disable-saml-if-omniauth-is-disabled | Lin Jen-Shin | 2018-07-20 | 1 | -1/+1 |
| | | | | | We also try to unify the way we setup OmniAuth, and how we check if it's enabled or not. | ||||
* | Updates from `rubocop -a` | Lin Jen-Shin | 2018-07-09 | 1 | -1/+1 |
| | |||||
* | Honor saml assurance level to allow 2FA bypassing | Roger Rüttimann | 2018-06-25 | 4 | -0/+27 |
| | |||||
* | Export assigned issues in iCalendar feed | Imre Farkas | 2018-05-31 | 2 | -5/+15 |
| | |||||
* | Add username to terms message in git and API callsbvl-add-username-to-terms-message | Bob Van Landuyt | 2018-05-24 | 1 | -4/+4 |
| | | | | | | | | This will make it clearer to users which account is being used to make the API/git call. So they know which account needs to be used to accept the terms. Closes #46649 | ||||
* | Minimize CE/EE difference in Gitlab::Auth::LDAP::Config | Rémy Coutable | 2018-05-18 | 1 | -2/+16 |
| | | | | Signed-off-by: Rémy Coutable <remy@rymai.me> | ||||
* | Minimize CE/EE difference in Gitlab::Auth::LDAP::Access | Rémy Coutable | 2018-05-18 | 1 | -10/+31 |
| | | | | Signed-off-by: Rémy Coutable <remy@rymai.me> | ||||
* | Minimize CE/EE difference in Gitlab::Auth::UserAuthFinders | Rémy Coutable | 2018-05-18 | 1 | -4/+6 |
| | | | | Signed-off-by: Rémy Coutable <remy@rymai.me> | ||||
* | Minimize CE/EE difference in Gitlab::Auth::Saml::User | Rémy Coutable | 2018-05-18 | 1 | -4/+2 |
| | | | | Signed-off-by: Rémy Coutable <remy@rymai.me> | ||||
* | Minimize CE/EE difference in Gitlab::Auth::Saml::Config | Rémy Coutable | 2018-05-18 | 1 | -0/+4 |
| | | | | Signed-off-by: Rémy Coutable <remy@rymai.me> | ||||
* | Fix system hook not firing for blocked users when LDAP sign-in is used | Stan Hu | 2018-05-12 | 1 | -1/+3 |
| | | | | | | | | | An LDAP sign-in request results in a different request parameter than a standard GitLab sign-in. Since Warden doesn't pass us the user that was blocked, we first search for a `username` in the request parameters and then look for `user.login`. Closes #46307 | ||||
* | Block access to API & git when terms are enforced | Bob Van Landuyt | 2018-05-10 | 1 | -0/+33 |
| | | | | | | When terms are enforced, but the user has not accepted the terms access to the API & git is rejected with a message directing the user to the web app to accept the terms. | ||||
* | Backport IdentityLinker#failed? from GroupSaml callback flow | James Edwards-Jones | 2018-05-04 | 1 | -0/+4 |
| | |||||
* | Auth::User classes refactor adds should_save? | James Edwards-Jones | 2018-04-23 | 3 | -14/+6 |
| | |||||
* | Replace define_method with alias_method in Omniauth Controllers | James Edwards-Jones | 2018-04-23 | 1 | -1/+1 |
| | |||||
* | Unify Saml::IdentityLinker and OAuth::IdentityLinker | James Edwards-Jones | 2018-04-23 | 3 | -44/+28 |
| | |||||
* | Show error on failed OAuth account link | James Edwards-Jones | 2018-04-22 | 2 | -4/+20 |
| | |||||
* | Refactor OmniauthCallbacksController to remove duplication | James Edwards-Jones | 2018-04-22 | 6 | -2/+101 |
| | | | | | Moves LDAP to its own controller with tests Provides path forward for implementing GroupSaml | ||||
* | Add better LDAP connection handling | Francisco Javier López | 2018-04-04 | 4 | -8/+47 |
| | |||||
* | Fix LDAP login without user in DB | Horatiu Eugen Vlad | 2018-03-27 | 3 | -17/+8 |
| | |||||
* | Fix provider server URL used when listing repos to importrd-fix-github-url-when-listing-repositories-at-importing | Rubén Dávila | 2018-03-12 | 1 | -1/+1 |
| | | | | Also use Gitlab::Auth::OAuth::Provider.config_for to access OmniAuth config | ||||
* | [CE] Add Naming/FileName rule checking expected class/module per filename | Gabriel Mazetto | 2018-03-08 | 1 | -1/+1 |
| | |||||
* | Make oauth provider login generic | Horatiu Eugen Vlad | 2018-03-05 | 5 | -8/+58 |
| | |||||
* | Moved o_auth/saml/ldap modules under gitlab/auth | Horatiu Eugen Vlad | 2018-02-28 | 15 | -0/+1542 |
| | |||||
* | Allow token authentication on go-get request | Douwe Maan | 2018-02-23 | 1 | -0/+8 |
| | |||||
* | Fixing request json mime type | Francisco Javier López | 2018-01-15 | 1 | -3/+1 |
| | |||||
* | Log and send a system hook if a blocked user fails to loginsh-log-when-user-blocked | Stan Hu | 2018-01-14 | 1 | -0/+36 |
| | | | | Closes #41633 | ||||
* | Renaming AuthenticationException to AuthenticationErrormk-add-user-rate-limits | Francisco Lopez | 2017-11-17 | 2 | -9/+9 |
| | |||||
* | Changes after rebase | Francisco Lopez | 2017-11-17 | 1 | -3/+5 |
| | |||||
* | Removing Offender | Francisco Lopez | 2017-11-17 | 1 | -1/+0 |
| | |||||
* | Moved Exceptions to Gitlab::Auth | Francisco Lopez | 2017-11-17 | 2 | -19/+20 |
| | |||||
* | Moving exceptions to UserAuthFinders | Francisco Lopez | 2017-11-17 | 1 | -7/+25 |
| | |||||
* | Leaving atom? query to fix tests | Francisco Lopez | 2017-11-17 | 1 | -1/+1 |
| | |||||
* | Change the rss url guard clause | Francisco Lopez | 2017-11-17 | 1 | -1/+1 |
| | |||||
* | Added some more comments | Francisco Lopez | 2017-11-17 | 2 | -7/+5 |
| | |||||
* | Removed method handle_return_value | Francisco Lopez | 2017-11-17 | 1 | -13/+8 |
| | |||||
* | Homogenising the type of the request handled by UserAuthFinder. Also tests fixed | Francisco Lopez | 2017-11-17 | 2 | -10/+11 |
| | |||||
* | Applied some code review comments | Francisco Lopez | 2017-11-17 | 2 | -25/+28 |
| | |||||
* | Removing private token | Francisco Lopez | 2017-11-17 | 1 | -1/+15 |
| | |||||
* | Some fixes after rebase | Francisco Lopez | 2017-11-17 | 2 | -48/+34 |
| | |||||
* | Updated refactor and pushing to see if test fails | Francisco Lopez | 2017-11-17 | 1 | -16/+18 |
| | |||||
* | First refactor | Francisco Lopez | 2017-11-17 | 2 | -43/+96 |
| | |||||
* | Refactor with ActionDispatch::Request | Michael Kozono | 2017-11-17 | 1 | -13/+11 |
| | |||||
* | Fix OAuth API and RSS rate limiting | Michael Kozono | 2017-11-17 | 1 | -0/+64 |
| | |||||
* | Enable Layout/TrailingWhitespace cop and auto-correct offenses | Robert Speicher | 2017-08-15 | 1 | -6/+6 |
| | |||||
* | Support multiple Redis instances based on queue type | Paul Charlton | 2017-07-11 | 1 | -1/+1 |
| | |||||
* | Create read_registry scope with JWT auth | Z.J. van de Weg | 2017-06-05 | 1 | -0/+4 |
| | | | | | | | | | | | | This is the first commit doing mainly 3 things: 1. create a new scope and allow users to use it 2. Have the JWTController respond correctly on this 3. Updates documentation to suggest usage of PATs There is one gotcha, there will be no support for impersonation tokens, as this seems not needed. Fixes gitlab-org/gitlab-ce#19219 | ||||
* | Remove unecessary defaults for uniq ip block, cleanup refactoring leftovers | Pawel Chojnacki | 2017-03-06 | 1 | -1/+2 |
| | |||||
* | align schema.rb with upstream and fix rubocop warning about not freezing ↵ | Pawel Chojnacki | 2017-03-06 | 1 | -1/+1 |
| | | | | mutable constants and empty error classes | ||||
* | Remove unecessary calls to limit_user!, UniqueIps Middleware, and address MR ↵ | Pawel Chojnacki | 2017-03-06 | 2 | -31/+20 |
| | | | | | | | | | | review - cleanup formating in haml - clarify time window is in seconds - cleanup straneous chunks in db/schema - rename count_uniqe_ips to update_and_return_ips_count - other |