Commit graph

170 commits

Author SHA1 Message Date
dc3502fed0 Fix session.save() for cookie sessions, add vcsserver/rc_license stubs
- Guard all session.save() calls with hasattr checks for CookieSession
  compatibility (CookieSession auto-saves via response callbacks)
- Guard beaker-specific _set_cookie_expires and _update_cookie_out in
  login views
- Defer ldap scope_labels to property to avoid class-level AttributeError
  when python-ldap is not installed
- Add vcsserver stub package to allow imports without full vcsserver
- Add rc_license stub for CE edition (no license management)
2026-02-19 19:38:09 -05:00
ievgenii vdovenko
60628d4426 tests: adds tests for ldap dao 2025-08-04 11:44:34 +02:00
ievgenii vdovenko
5c64efb55f feature: removes redundant class 2025-08-04 11:44:25 +02:00
ievgenii vdovenko
7577eeb493 feature: initial implementation of LDAP/AD sync 2025-08-04 11:44:22 +02:00
ievgenii vdovenko
77a339f82d tests: adds test to validate calling schedule unschedule tasks 2025-08-04 11:43:18 +02:00
ievgenii vdovenko
27e90c24cd tests: adds fail test 2025-08-04 11:43:18 +02:00
ievgenii vdovenko
c4e8a9c7cc tests: adds tests for ldap dao 2025-08-04 11:43:18 +02:00
ievgenii vdovenko
736a441186 feature: removes redundant class 2025-08-04 11:43:18 +02:00
ievgenii vdovenko
c0201a85a8 feature: adds schedule/unschedule AD users sync. 2025-08-04 11:43:18 +02:00
ievgenii vdovenko
b783ff6689 feature: initial implementation of LDAP/AD sync 2025-08-04 11:43:18 +02:00
ievgenii vdovenko
2dcb9984c7 feature: implemented deleting user and migrating all user assets new system ghost user 2025-07-25 15:43:29 +02:00
RhodeCode Admin
166db21812 core: run ruff format 2025-01-13 17:47:37 +01:00
RhodeCode Admin
82f0f8d214 core: updated copyright to 2024 2024-11-12 16:39:07 +01:00
RhodeCode Admin
cefbec329a auth: updated saml docs, and re-order info on plugin details for easier setup 2024-08-20 15:04:33 +02:00
Serhii Ilin
d069311e52 feat(2fa): added 2fa for more auth plugins and moved 2fa forced functionality to ee edition. Fixes: RCCE-68 2024-05-13 16:24:31 +03:00
Serhii Ilin
9678665ecd feat(2fa): Added 2fa option. Fixes: RCCE-65 2024-04-15 12:13:03 +03:00
Serhii Ilin
d8281bb5c0 feat(login by email option): added ability to log in with user primary email. Fixes: RCCE-63 2024-03-14 11:18:07 +02:00
RhodeCode Admin
c8b35a769a ldap: small fixes and improvements over ldap authentication 2023-08-21 09:40:30 +02:00
RhodeCode Admin
8ae0e8de44 caches: make sure the global cache namespace prefixes are used.
- fixes problems when porting from old RC to new python3 based and different serialization mech
2023-07-26 16:15:52 +02:00
RhodeCode Admin
4bbb30fa06 modernize: updates for python3 2023-07-18 14:45:20 +02:00
RhodeCode Admin
a6e9ccf9e0 authentication: run modernize for python3 2023-07-18 14:26:37 +02:00
RhodeCode Admin
3c7a0fe047 lint: ruff run 2023-07-18 13:46:39 +02:00
RhodeCode Admin
42301154fc copyrights: updated for 2023 2023-07-18 11:57:27 +02:00
RhodeCode Admin
2ff61d5c42 authentication: fixed for python3 migrations 2023-07-18 11:00:47 +02:00
RhodeCode Admin
d985e2f96c authentications: remove utf8 markers 2023-07-18 11:00:05 +02:00
RhodeCode Admin
0e5495de20 auth: optimized logging with lazy eval of params formatting 2023-05-11 12:26:08 +02:00
RhodeCode Admin
05e6a99173 logging: removed log.warning calls 2023-03-27 21:47:18 +02:00
RhodeCode Admin
34af9cfa2f python3: fixed various code issues
- iterators
- use of u''
2023-03-20 20:51:25 +01:00
RhodeCode Admin
0122133e4e python3: fixed usage of .next() and .func_name 2023-03-07 09:56:40 +01:00
RhodeCode Admin
94a50edf39 python3: fix usage of int/long 2023-03-07 09:54:36 +01:00
RhodeCode Admin
c22758550a python3: fix urllib usage 2023-03-06 22:00:27 +01:00
RhodeCode Admin
159c758565 auth-plugins: remove the in-object cache that cauused invalidation failures.
We use now proper dogepile cache which gets purged on settings change.
2023-02-02 09:42:19 +01:00
RhodeCode Admin
82894a87fa caches: fixed auth plugin usage of cached settings.
Don't use in-class cache as it breaks invalidation
2023-01-10 09:22:41 +01:00
RhodeCode Admin
8a95bb9eb4 logging: changed module in logs extra as it is a reserved keyword 2022-10-27 22:54:02 +02:00
RhodeCode Admin
faa449987b logging: expose extra metadata to various important logs for loki 2022-10-27 22:49:17 +02:00
RhodeCode Admin
bc8d59f1a7 metrics: use prom metrics, and added some additional metrics 2022-10-25 13:08:47 +02:00
Milka Kuzminski
5590b13ef5 auth: allow custom name for plugins if defined in the settings. 2020-11-03 13:25:13 +01:00
Marcin Kuzminski
8d9e71fee2 caches: use better name for empty user cache, None was confusing, and looked as if it would be an error. 2020-07-03 11:04:47 +02:00
Daniel Dourvaris
0937ed89a1 auth-crawd: py3 compat 2020-05-20 10:44:04 +02:00
Marcin Kuzminski
fe96e16646 code: update copyrights to 2020 2020-04-16 00:34:52 +02:00
Marcin Kuzminski
13f313d4b5 ldap: changed plugin to help with debugging and error handling.
- mostly based from support.
2020-04-15 14:47:52 +02:00
Marcin Kuzminski
90b8007935 ldap: fixed ldaps port example to correct number. 2020-04-06 16:51:44 +02:00
Marcin Kuzminski
b7e6ccbdc0 ldap: logging fixes 2020-03-19 14:20:23 +01:00
Marcin Kuzminski
8e01135d04 Authentication: cache plugins for auth and their settings in the auth_registry.
- Before that change on each requests 4x we loaded plugins for authentication, this hit
many caches, db invalidation context and loaded the plugins logic each time. This was a heavy performance hit
for SVN and other backends as they needed to load that plugins many many times
- Since Authentication plugins almost never change, we'll not store the plugins listed for authentication into
the authnregistry for each process
- For AuthPlugins settings we now also flush plugins settings, and authnregistry cached plugins
2020-01-23 12:41:51 +01:00
Daniel Dourvaris
53980d49a6 authentication: allow super-admins to change bound authentication for users.
- we had many requests from admins on doing so, after connecting LDAP/Saml
- since admins actually started doing this via DB it's no longer a point we shouldn't enable it via UI
2019-10-10 14:08:11 +02:00
Marcin Kuzminski
928652312a core: added more accurate time measurement for called functions 2019-07-17 16:28:41 +02:00
Marcin Kuzminski
6a6d8fa92c auth: add scope and login restrictions to rhodecode plugin, and scope restriction to token plugin.
- allows limiting the usage of builtin auth to HTTP only (so force usage of tokens)
- allows migration to something like saml keeping only super-admin for login.
2019-01-16 11:03:28 +01:00
Marcin Kuzminski
26b57aead0 authentication: introduce login restriction option for builtin rhodecode plugin. 2019-01-15 11:26:25 +01:00
Marcin Kuzminski
1ead0d3876 auth: login/registration changes for upcomming new rules for login using external identities.
- show session expiration
2019-01-15 11:34:50 +01:00
Marcin Kuzminski
bd1a9c8201 docs: updated copyrights to 2019 2019-01-02 18:13:27 +01:00