Commit Graph
23 Commits
Author SHA1 Message Date
Patricio Cano 9397ce9137 Correct access control flow for Git HTTP requests. 2016-07-05 16:54:22 -05:00
Patricio Cano da15471bb1 Clarify protocol access check, and make Git HTTP access call more specific. 2016-07-05 16:54:22 -05:00
Patricio Cano 0f54e2ae6c Render the status message with plain: so that the message gets passed to the Git client. 2016-07-05 16:54:22 -05:00
Patricio Cano 08018b7a7a Render :forbidden *only* if HTTP is disabled. 2016-07-05 16:54:22 -05:00
Patricio Cano 41c87b9a23 Return :forbidden if HTTP protocol access is not allowed 2016-07-05 16:54:22 -05:00
Patricio Cano c98f89eac7 Simplify access checks 2016-07-05 16:54:22 -05:00
Patricio Cano 7735ef86f0 Only allow Git Access on the allowed protocol 2016-07-05 16:54:22 -05:00
Jacob Vosmaer 4bcad1cbdd Groundwork for Kerberos SPNEGO (EE feature) 2016-07-01 11:46:56 +02:00
Jacob Vosmaer 0e896ffe4e Improve Gitlab::Auth method names
Auth.find was a very generic name for a very specific method.
Auth.find_in_gitlab_or_ldap was inaccurate in GitLab EE where it also
looks in Kerberos.
2016-06-10 14:51:16 +02:00
Jacob VosmaerandRobert Speicher 63ed80321b Skip authenticity token checks for Git HTTP 2016-06-08 16:00:49 -04:00
Jacob Vosmaer 46d5760c76 Fewer silly instance variables 2016-06-03 16:04:59 +02:00
Jacob Vosmaer 50a357d7e8 Use #present? 2016-06-03 15:49:52 +02:00
Jacob Vosmaer 1564074648 Refactor _allowed? methods as Rémy asked 2016-06-03 15:28:35 +02:00
Jacob Vosmaer 3ffa494ffe Changes after more review from Rémy 2016-06-03 14:57:34 +02:00
Jacob Vosmaer b1ffc9f0fe Make CI/Oauth/rate limiting reusable 2016-04-29 18:58:55 +02:00
Jacob Vosmaer d698d3e846 More changes suggested by Rémy 2016-04-25 18:05:05 +02:00
Jacob Vosmaer c161065e78 Don't mess up our parent controller 2016-04-22 14:04:20 +02:00
Jacob Vosmaer 9add3fbb33 Some changes after review from Rémy and Valery 2016-04-22 13:24:53 +02:00
Jacob Vosmaer d3541da4ce Comment and whitespace 2016-04-15 12:40:43 +02:00
Jacob Vosmaer ab9dfa8fd6 Clarify intentions 2016-04-06 19:25:47 +02:00
Jacob Vosmaer 91226c2001 Move workhorse protocol code into lib 2016-04-06 17:52:12 +02:00
Jacob Vosmaer 5fe06d7365 Add some upload specs 2016-03-24 18:58:29 +01:00
Jacob Vosmaer 55f5a68f09 Get Grack::Auth tests to pass 2016-03-23 18:34:16 +01:00