Dmitriy Zaporozhets
e890582681
Rubocop enabled for: Use spaces inside hash literal braces
2015-02-02 20:36:54 -08:00
Valery Sizov
54f6d8c7b5
an ability to clone project with oauth2 token
2015-01-28 15:57:31 -08:00
Jacob Vosmaer
af56c1dd32
White-list requests from 127.0.0.1
...
On some misconfigured GitLab servers, if you look in production.log it looks
like all requests come from 127.0.0.1. To avoid unwanted banning we
white-list 127.0.0.1 with this commit.
2015-01-06 16:56:56 +01:00
Jacob Vosmaer
c8b2def2be
Add more comments explaining how we block IPs
2014-12-18 11:08:11 +01:00
Jacob Vosmaer
62ea02740d
Block Git HTTP Basic Auth after 10 failed attempts
2014-12-15 18:57:42 +01:00
Valery Sizov
53bf52f191
Better message for failed pushes because of git hooks
...
Conflicts:
lib/gitlab/git_access.rb
spec/lib/gitlab/git_access_spec.rb
2014-11-18 13:10:07 +02:00
Ciro Santilli
ce056d8074
Improve grack auth hooks comment.
2014-10-21 12:36:09 +02:00
Dmitriy Zaporozhets
5c038d949f
Fix gitlab-ci integration
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2014-03-21 23:04:57 +02:00
Dmitriy Zaporozhets
7dd18a3ec8
Fix http clone for public project
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2014-03-21 14:52:30 +02:00
Dmitriy Zaporozhets
83e83b6617
Improve grack auth
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2014-03-20 10:53:03 +02:00
Dmitriy Zaporozhets
729b358ff2
push via http now served via /allowed API
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2014-03-20 10:16:17 +02:00
Thomas Guyot-Sionnest
843548cc76
Fix HTTP push to public repos
...
When doing an HTTP push, git (as of v1.7.9) first do an info/refs
request, and only if this request requires authentication it asks the
user for its password and authenticates further requests.
The initial request normally clears without auth on public repos as it
doesn't update any ref. This patch forces every git-receive-pack
requests to provide authentication.
2013-12-16 12:39:54 -05:00
Jason Hollingsworth
d9bb4230cc
Adding authenticated public mode (internal).
...
Added visibility_level icons to project view (rather than just text).
Added public projects to search results.
Added ability to restrict visibility levels standard users can set.
2013-11-26 22:22:07 -06:00
Dmitriy Zaporozhets
51ae88c4e4
Improve refs parsing for git over http
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2013-11-22 12:55:20 +02:00
Dmitriy Zaporozhets
06feb3c442
Cleanup parsed refs for git over HTTP
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2013-11-22 12:41:55 +02:00
Dmitriy Zaporozhets
182aa19e26
Parse all refs when do push via HTTP and check permissions for all of them
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2013-11-20 11:06:19 +02:00
Dmitriy Zaporozhets
0542261437
Allow git clone with http for GitLab CI service:
...
If you enable GitLab CI for project you will be able to clone project
source code with next command:
git clone http://gitlab-ci-token:XXXXXXXXXXXX@host:project.git
Requires for GitLab CI 4.0
2013-10-24 17:17:22 +03:00
Dmitriy Zaporozhets
7dfb2b6379
Remove include of grack_ldap
2013-09-02 23:52:58 +03:00
Dmitriy Zaporozhets
48ce80a60c
Fix issue when developers are able to push to protected branch
...
When that branch contain a '/' in the branch name.
Fix for git over HTTP
2013-08-26 12:54:57 +03:00
amouhzi and Hassan Amouhzi
39d8a64d25
Fixes grack authentification under relative_url_root
...
Ref: https://github.com/gitlabhq/gitlabhq/commit/e6159b8725f99af78f446f8d33fa0e52b7780430
Ref: https://github.com/gitlabhq/gitlabhq/pull/3204
Ref: https://github.com/gitlabhq/gitlabhq/issues/1228
Add Rails' variable in application.rb to support relative url
This variable is used by assets compilation and other modules.
Note that user needs to change application.rb too
Restrict session cookie to the relative path if set.
Ref: https://github.com/gitlabhq/gitlabhq/commit/2c2f1e31856a4decdae469974f5bea8245316f7e
Fix Update attachment_uploader.rb bug with relative URL
See: https://github.com/gitlabhq/gitlabhq/commit/161afda3fa4fca58f396e9c3acbd72bc14490ace
Fix Wall relative bug with attachement files (javascript)
2013-08-15 21:25:09 +02:00
Dmitriy Zaporozhets
559e83d300
Add LDAP support to /api/session
2013-07-16 11:28:19 +03:00
Dmitriy Zaporozhets
b4e8fea274
Refactor grack auth module. Add git over http wiki support
2013-06-14 14:42:55 +03:00
Dmitriy Zaporozhets
63c6f30aba
Fix ldap auth for http push
2013-05-24 20:36:28 +03:00
tsl0922
f1c9b05868
better fix for encoding error
2013-05-03 11:31:23 +08:00
tsl0922
4e055e8a63
fix: UTF-8 encoding error
2013-05-03 10:58:53 +08:00
tsl0922
ef61d1f200
fix http push 401
2013-05-03 10:58:53 +08:00
Friedrich Beckmann
20a88f5c43
LDAP authentication in grack - check ldap conf before call / added comment
2013-04-29 22:26:03 +02:00
Friedrich Beckmann
228baa80b2
LDAP Authentification with grack for https push - fixed password check
2013-04-27 23:31:48 +02:00
Dmitriy Zaporozhets
c9ca15e8d6
require missing lib
2013-02-14 15:25:55 +02:00
Dmitriy Zaporozhets
49cf9badbc
Gitlab::ShellEnv added
2013-02-14 15:17:43 +02:00
Dmitriy Zaporozhets
b698094d4d
Update post-receive worker to use correct identifier
2013-02-14 14:00:02 +02:00
Dmitriy Zaporozhets
5c3fdfaacb
Fixed developer push to protected branch. Closes #2647
2013-01-19 11:11:25 +02:00
Jeremy Slater
80b8921a9a
Public HTTP clones and remove auth request for public projects
2013-01-14 09:46:55 -05:00
Dmitriy Zaporozhets
4c6224aad1
Public git read-only access via http
2013-01-13 17:25:18 +02:00
Chris Frohoff
21e55ca318
added RAILS_RELATIVE_URL_ROOT support
2012-12-28 18:11:28 +00:00
Jeremy Slater
6cf5d7c96d
Support read-only access for git over HTTP
2012-12-11 15:28:40 -05:00
Dmitriy Zaporozhets
585eb70588
Fix http push with namespaces. Allow use of username as login
2012-11-26 11:23:08 +02:00
Markus Grobelin
bd50a9f466
grack: allow repositories to have dots in name, e.g. serverconfigs-example.com.git
2012-10-26 14:05:57 +02:00
Dmitriy Zaporozhets
893ce9ae24
Fix git over HTTP
2012-10-22 18:45:42 +03:00
randx
0189ee97ed
Security for online editor. Replace dev_access?, master_access? with can? method usage
2012-10-21 12:12:14 +03:00
Saito
aaa916f15c
use high level api and compatibility with Passenger
2012-09-17 18:36:23 +08:00
randx
7cdc5b9e04
Use similar interface to access gitolite
...
Simplified gitolite handle logic
Stubn over monkeypatch
Stub only specific methods in Gitlab:Gitolite
Moved grach auth to lib
added specs for keys observer
removes SshKey role
2012-08-29 00:04:06 +03:00