home/gitlabhq
2
0
Fork 0
mirror of https://github.com/wahyd4/gitlabhq.git synced 2026-08-12 06:06:05 +10:00
Code Issues Packages Projects Releases Wiki Activity
26,661 Commits 48 Branches 340 Tags
31e28ebcebc054eaeef2eddba64ff2ff7ca3104f
Commit Graph
3 Commits
Author SHA1 Message Date
Grzegorz Bizon 33a8dfd04f Make sessions controller specs more explicit 2016-04-07 13:16:48 +02:00
Grzegorz Bizon 00da609cfd Fix 2FA authentication spoofing vulnerability 
This commit attempts to change default user search scope if otp_user_id
session variable has been set. If it is present, it means that user has
2FA enabled, and has already been verified with login and password. In
this case we should look for user with otp_user_id first, before picking
it up by login.
 2016-04-07 11:19:29 +02:00
Grzegorz Bizon 301f4074aa Add specs for sessions controller including 2FA 
This also contains specs for a bug described in #14900
 2016-04-06 12:26:10 +02:00