Gabriel Mazetto
1249289f89
Fixed codestyle and added 2FA documentation
2015-12-24 19:01:30 -02:00
Gabriel Mazetto
b61a5bc20c
specs for forced two-factor authentication and grace period
...
simplified code and fixed stuffs
2015-12-24 19:01:30 -02:00
Gabriel Mazetto
31fb2b7702
Grace period support for TFA
2015-12-24 19:01:30 -02:00
Gabriel Mazetto
33964469b3
WIP require two factor authentication
2015-12-24 19:00:18 -02:00
tduehr
8e3f1fa629
add CAS authentication support
2015-12-14 21:43:41 -06:00
Jeroen van Baarsen
2dec5ec990
Only redirect to homepage url when its not the root url
...
It was possible to create an infi redirect when the user set up the
`home_page_url` to redirect to the main URL of the gitlab instance.
This fix makes sure this redirect is not possible.
Fixes !1020
Signed-off-by: Jeroen van Baarsen <jeroenvanbaarsen@gmail.com >
2015-11-02 15:42:30 +01:00
Robert Speicher
7924dd5c9f
Merge branch 'project-path-case-sensitivity' into 'master'
...
Prefer project with exact path to differently cased one when both exist.
Fixes #3113 .
See merge request !1649
2015-10-22 13:03:04 +00:00
Douwe Maan
e17e5a5ce4
Move case sensitivity check to find_with_namespace.
2015-10-21 10:09:32 +02:00
Stan Hu
9bfc531ec6
Redirect to a default path if HTTP_REFERER is not set
...
Safari 9.0 does not yet honor the HTML5 `origin-when-cross-origin` mode,
and it's possible load balancers/proxies strip the HTTP_REFERER from
the request header. In these cases, default to some default path.
Closes #3122
Closes https://github.com/gitlabhq/gitlabhq/issues/9731
2015-10-20 07:45:48 -07:00
Douwe Maan
2f7fc7e9f7
Prefer project with exact path to differently cased one when both exist.
2015-10-20 16:16:08 +02:00
Douwe Maan
c993481d99
Merge branch 'master' into git-archive-golang
2015-10-15 11:47:36 +02:00
Jacob Vosmaer
a74915a4ad
Always return HTML in git_not_found
...
This allows us to give a nice 404 for e.g. archive.zip.
2015-10-14 15:22:03 +02:00
Valery Sizov
8346dde052
Only render 404 page from /public
2015-10-13 20:12:34 +03:00
Francesco Levorato
1bbcc29687
Redirect case sensitive project path to the normalized one
2015-09-18 16:37:21 +02:00
Dmitriy Zaporozhets
0b5d627cd4
Merge branch 'master' into ci-and-ce-sitting-in-a-tree-k-i-s-s-i-n-g
2015-09-09 14:56:02 +02:00
Dmitriy Zaporozhets
90c338a495
Move helpers back to original directory
2015-09-09 14:37:34 +02:00
Jared Szechy
e156f42079
FogBugz project import
2015-09-08 20:23:01 -04:00
Douwe Maan
30555c1d24
Merge branch 'rs-remove-user-color-scheme-class' into 'master'
...
Apply syntax highlighting to fenced code blocks client-side
Instead of applying the syntax highlighting scheme class to these blocks
server-side, we use Javascript and Gon to apply the user's color scheme
(or the default) client-side.
This will make it easier to cache these blocks in the future because
they're no longer state-dependent.
See merge request !1203
2015-08-27 16:24:51 +00:00
Douwe Maan
843694f902
Merge branch 'master' into ci-and-ce-sitting-in-a-tree-k-i-s-s-i-n-g
2015-08-26 17:53:31 -07:00
Stan Hu
c1fe98e0b9
Prevent too many redirects error when home page URL set to external_urll
...
Many users naively set the home page URL setting to external_url
(e.g. https://mydomain.com ). When an unauthenticated user signs in, this
causes endless redirections. For example, this is occuring:
1. Unauthenticated user attempts to access https://mydomain.com/dashboard
2. Application redirects to the home page URL: https://mydomain.com
3. Repeat step 2
In step 3, ApplicationController should have redirected the user to
https://mydomain.com/users/sign_in . Disabling the redirection if home
page URL is the same as external_url prevents users from messing up.
Closes https://github.com/gitlabhq/gitlabhq/issues/8843
Closes #2057
2015-08-26 07:38:33 -07:00
Douwe Maan
046b283127
Groundwork for merging CI into CE
2015-08-25 18:42:46 -07:00
Robert Speicher
2c3e42e4a4
Remove user_color_scheme_class
...
Instead of rendering this value server-side, we use Javascript and Gon
to apply the user's color scheme (or the default) to any syntax
highlighted code blocks.
This will make it easier to cache these blocks in the future because
they're no longer state-dependent.
2015-08-25 15:32:38 -07:00
Artem Sidorenko
e238a8dad5
Import sources: show only enabled sources
2015-08-20 12:13:22 +02:00
Douwe Maan
70a3c165a9
Allow custom label to be set for authentication providers.
2015-07-23 15:20:12 +02:00
Stan Hu
f4f216db67
Only enable HSTS header for HTTPS and port 443
...
Closes https://github.com/gitlabhq/gitlabhq/issues/9449
2015-07-12 21:37:10 -07:00
Robert Speicher
335749d754
Ensure @sort is set by set_filters_params
...
Closes #1750
2015-07-08 18:17:13 -04:00
Daniel Gerhardt
bee3979a4a
Fix redirection to home page URL for unauthorized users
...
Redirection to the home page URL was broken by changing the target for
`root_url` from `DashboardController` to `RootController` in
94d3c1433d . This regression was introduced
in the 7.12.0 release.
Fixes #1916 .
2015-07-03 00:22:20 +02:00
Stan Hu
07efb17e10
Fix 403 Access Denied error messages when accessing Labels section in a project that has MRs disabled but issues enabled
...
Closes #1813
2015-06-18 03:15:05 -07:00
Alex Lossent
60225a067d
Allow to configure a URL to show after sign out
2015-05-29 18:20:15 +02:00
Douwe Maan
45e4727f97
Set milestone on new issue when creating issue from index with milestone filter active.
2015-05-27 14:22:11 +02:00
Robert Speicher
e512f770cd
Fix Devise parameter sanitizer for otp_attempt
2015-05-09 17:31:40 -04:00
Dmitriy Zaporozhets and Robert Speicher
de9e1c3bad
Turn 2-factor authentication into 2 steps process. Disabled 2fa UI for ldap users since it is not supported
2015-05-09 17:31:10 -04:00
Dmitriy Zaporozhets
e097812f57
Merge pull request #9234 from dsander/group-milestones-by-title
...
Group milestones by title in the dashboard and all other issue views
2015-05-03 14:29:31 +03:00
Douwe Maan
92fd3ccee0
Add helpers for header title and sidebar, and move setting those from controllers to layouts.
2015-05-01 10:39:16 +02:00
Dominik Sander
8d17e79d1d
Removed unused ApplicationController#set_filter_values method
...
The instance variables assigned in `set_filter_values` are not used by
anything anymore.
2015-05-01 00:18:40 +02:00
Robert Speicher
aa9435cddb
Remove duplicate settings for default_url_options
...
Closes internal https://dev.gitlab.org/gitlab/gitlabhq/issues/2269
2015-04-25 19:46:04 -04:00
Dmitriy Zaporozhets
d4fb062d97
Merge branch 'sign-out-to-sign-in' into 'master'
...
Redirect to sign in page after signing out.
Addresses internal issue https://dev.gitlab.org/gitlab/gitlabhq/issues/2125 .
See merge request !541
2015-04-23 12:38:11 +00:00
Jeroen van Baarsen
5a4ebfb47a
Fixed the Rails/ActionFilter cop
...
Signed-off-by: Jeroen van Baarsen <jeroenvanbaarsen@gmail.com >
2015-04-20 15:39:37 +02:00
Douwe Maan
80657c818c
Redirect to sign in page after signing out.
2015-04-18 12:06:50 +02:00
Douwe Maan
36b54fc04f
Don't crash when project repository doesn't exist.
2015-04-14 23:26:53 +02:00
Douwe Maan
0ece6bd828
Use \A and \z in regexes instead of ^ and $.
2015-04-10 18:31:07 +02:00
Stan Hu
dfd256f29e
Support configurable attachment size via Application Settings
...
Fix bug where error messages from Dropzone would not be displayed on the issues page
Closes #1258
2015-04-02 00:04:08 -07:00
Stan Hu
8173ef976f
Set Application controller default URL options to ensure all url_for calls are consistent
...
Closes #1249
2015-03-25 12:27:10 -07:00
Dmitriy Zaporozhets
f0cbbd70bb
Use same constant for amount of items per page
2015-03-12 15:37:00 -07:00
Dmitriy Zaporozhets
6de4e4a622
Include route helper shortcut in controller
2015-02-26 09:34:20 -08:00
Douwe Maan
448817c4de
Load public key in initializer.
2015-02-24 15:07:24 +01:00
Vinnie Okada
76aad9b76e
Upgrade to Rails 4.1.9
...
Make the following changes to deal with new behavior in Rails 4.1.2:
* Use nested resources to avoid slashes in arguments to path helpers.
2015-02-14 11:09:23 -07:00
Dmitriy Zaporozhets
bbca6a0abd
Refactor sorting in project
2015-02-05 19:15:05 -08:00
Marin Jankovski
537cd66d7e
Add gitlab internal issue tracker service.
2015-01-28 09:28:17 -08:00
Steven Burgart
5c80160218
Fix various typos
...
signe-in -> signed-in
go_to_gihub_for_permissions -> go_to_github_for_permissions
descendand -> descendant
behavour -> behaviour
recepient_email -> recipient_email
generate_fingerpint -> generate_fingerprint
dependes -> depends
Cant't -> Can't
wisit -> visit
notifcation -> notification
sufficent_scope -> sufficient_scope?
levet -> level
2015-01-18 10:29:37 -05:00