GitLab Bot
88bff01768
Add latest changes from gitlab-org/gitlab@master
2020-09-21 18:09:58 +00:00
GitLab Bot
591b0e86e3
Add latest changes from gitlab-org/gitlab@master
2020-09-16 12:10:15 +00:00
GitLab Bot
537882ad40
Add latest changes from gitlab-org/gitlab@master
2020-09-10 00:08:32 +00:00
GitLab Bot
8e35232810
Add latest changes from gitlab-org/gitlab@master
2020-09-02 15:10:54 +00:00
GitLab Bot
85f7fa54f4
Add latest changes from gitlab-org/gitlab@master
2020-08-18 18:10:10 +00:00
GitLab Bot
af7f4b8c37
Add latest changes from gitlab-org/gitlab@master
2020-08-05 03:10:58 +00:00
GitLab Bot
55b5a8778c
Add latest changes from gitlab-org/gitlab@master
2020-07-30 12:09:33 +00:00
GitLab Bot
53288eeb63
Add latest changes from gitlab-org/gitlab@master
2020-05-05 21:09:42 +00:00
GitLab Bot
9398d718d9
Add latest changes from gitlab-org/gitlab@master
2020-04-14 00:09:57 +00:00
GitLab Bot
403678e004
Add latest changes from gitlab-org/gitlab@master
2020-04-08 12:09:42 +00:00
GitLab Bot
bba3aae626
Add latest changes from gitlab-org/gitlab@master
2020-03-28 00:07:51 +00:00
GitLab Bot
dc003cd08b
Add latest changes from gitlab-org/gitlab@master
2020-03-26 18:08:03 +00:00
GitLab Bot
dc889678d1
Add latest changes from gitlab-org/gitlab@master
2020-03-12 15:09:39 +00:00
GitLab Bot
5564275a0b
Add latest changes from gitlab-org/gitlab@master
2020-02-06 12:10:29 +00:00
GitLab Bot
f6e985dba4
Add latest changes from gitlab-org/gitlab@master
2020-01-08 06:08:13 +00:00
GitLab Bot
4529c19950
Add latest changes from gitlab-org/gitlab@master
2019-12-03 21:06:23 +00:00
GitLab Bot
308146dc39
Add latest changes from gitlab-org/gitlab@master
2019-10-10 00:06:44 +00:00
GitLab Bot
e08eba1838
Add latest changes from gitlab-org/gitlab@master
2019-09-28 00:06:20 +00:00
GitLab Bot
b7dfe2ae40
Add latest changes from gitlab-org/gitlab@master
2019-09-13 13:26:31 +00:00
Giorgenes Gelatti
f5b2899422
If user can push to docker then it can delete too
...
Extends the permission of $CI_REGISTRY_USER to allow them
to delete tags in addition to just pushing.
https://gitlab.com/gitlab-org/gitlab-ce/issues/40096
2019-09-03 02:41:22 +00:00
Etienne Baqué
bc4efd18a0
Removed rubocop disable flags, updated changelog
2019-08-26 19:39:49 -07:00
Etienne Baqué
84d6dcbe50
Updated call to find deploy token
2019-08-26 19:39:48 -07:00
Marius Bobin
d51365efe7
Exempt `jwt/auth` for user `gitlab-ci-token` from rate limiting
2019-08-23 08:05:48 +00:00
Mayra Cabrera
0ab89d8e36
Add a rubocop for Rails.logger
...
Suggests to use a JSON structured log instead
Related to https://gitlab.com/gitlab-org/gitlab-ce/issues/54102
2019-07-10 19:26:47 +00:00
Horatiu Eugen Vlad
0aa56d895d
Added write_repository scope for personal access token
2019-04-15 13:05:55 +00:00
GotenXiao
7a1c810dc9
Fix #44332 - Add support for profile and email
2019-02-06 16:48:36 +00:00
Ash McKenzie
8ce86bf9a0
Revert "Revert "LfsToken uses JSONWebToken::HMACToken by default""
...
This reverts commit 00acef4340
.
2018-12-17 17:17:39 +11:00
🤖 GitLab Bot 🤖
00acef4340
Revert "LfsToken uses JSONWebToken::HMACToken by default"
...
This reverts commit 22954f2202
2018-12-05 07:03:28 +00:00
Ash McKenzie
22954f2202
LfsToken uses JSONWebToken::HMACToken by default
...
LfsToken::HMACToken#token_valid?() will be examined and if false, look
in redis via LfsToken::LegacyRedisDeviseToken#token_valid?().
2018-12-05 15:22:37 +11:00
Robert Speicher
c847f172d2
Merge branch 'fix_pat_auth-11-4' into 'security-11-4'
...
[11.4] Fix Token lookup for Git over HTTP and registry authentication
See merge request gitlab/gitlabhq!2577
2018-10-29 17:20:53 +01:00
gfyoung
c858f70d07
Enable frozen string for lib/gitlab/*.rb
2018-10-22 07:00:50 +00:00
Yorick Peterse
2039c8280d
Disable existing offenses for the CodeReuse cops
...
This whitelists all existing offenses for the various CodeReuse cops, of
which most are triggered by the CodeReuse/ActiveRecord cop.
2018-09-11 17:32:00 +02:00
Lin Jen-Shin
d0afab482f
Disable SAML if OmniAuth is disabled
...
We also try to unify the way we setup OmniAuth, and how we check
if it's enabled or not.
2018-07-20 18:54:46 +08:00
Kamil Trzciński
1e3cea1a0f
Bring back the EE changes to CE to authentication of builds
2018-06-04 22:25:46 +02:00
Lin Jen-Shin
1e2b6cf514
Introduce Gitlab::Auth.omniauth_setup_providers
...
Which could extend from EE
2018-06-01 14:30:10 +08:00
Lin Jen-Shin
39b6f31c66
Eliminate constants warnings by:
...
* Replace `require` or `require_relative` with `require_dependency`
* Remove unneeded `autoload`
2018-06-01 13:46:46 +08:00
🙈 jacopo beschi 🙉
c6b1043e9d
Resolve "Make a Rubocop that forbids returning from a block"
2018-04-18 09:19:40 +00:00
Kamil Trzciński
b38439a3ae
Use proper auth_scope for deploy token
2018-04-07 10:35:00 +02:00
Mayra Cabrera
c4f56a8802
Increase test suite around deploy tokens behavior
...
Also, fixes broken specs
2018-04-06 21:20:17 -05:00
Mayra Cabrera
a475411f43
Fixes broken schema and minor changes
2018-04-06 21:20:16 -05:00
Mayra Cabrera
8315861c9a
Include ProjectDeployTokens
...
Also:
- Changes scopes from serializer to use boolean columns
- Fixes broken specs
2018-04-06 21:20:16 -05:00
Kamil Trzciński
72220a99d1
Support Deploy Tokens properly without hacking abilities
2018-04-06 21:20:16 -05:00
Mayra Cabrera
171b2625b1
Addreses backend review suggestions
...
- Remove extra method for authorize_admin_project
- Ensure project presence
- Rename 'read_repo' to 'read_repository' to be more verbose
2018-04-06 21:20:16 -05:00
Mayra Cabrera
7deab31722
Removes logic from Jwt and handle different scenarios on Gitlab::Auth
...
- When using 'read_repo' password and project are sent, so we used both
of them to fetch for the token
- When using 'read_registry' only the password is sent, so we only use
that for fetching the token
2018-04-06 21:20:16 -05:00
Mayra Cabrera
370fc05da7
Implement 'read_repo' for DeployTokens
...
This will allow to download a repo using the token from the DeployToken
2018-04-06 21:20:16 -05:00
Horatiu Eugen Vlad
7d01792614
Fix LDAP login without user in DB
2018-03-27 09:21:17 +02:00
Horatiu Eugen Vlad
6d3cb7e22e
Make oauth provider login generic
2018-03-05 22:26:40 +00:00
Horatiu Eugen Vlad
1ad5df49b1
Moved o_auth/saml/ldap modules under gitlab/auth
2018-02-28 16:53:02 +01:00
Mario de la Ossa
eaada9d706
use Gitlab::UserSettings directly as a singleton instead of including/extending it
2018-02-02 18:39:55 +00:00
Sean McGivern
89c9d2ad6b
Merge branch 'dm-fix-registry-with-sudo-token' into 'master'
...
Fix pulling and pushing using a personal access token with the sudo scope
Closes #40466
See merge request gitlab-org/gitlab-ce!15571
2017-11-24 09:09:38 +00:00