Marcin Kuzminski
0ca4b7cbfc
password-reset: strengthten security on password reset logic.
...
- generate token that has special password reset role
- set 10 minut expiration on the token
- add some sleep to prevent bruteforcing attacks
- use implicit messages to prevent user email discovery attacks
2017-02-26 21:28:09 +01:00
Marcin Kuzminski
eb8c2fe3d1
helper-blocks: fix pre formatting only for auth plugin helper texts.
...
- leave other as they can break if we apply same for all helper blocks.
2017-02-25 10:20:10 +01:00
Marcin Kuzminski
732e6c0240
pull-requests: move text with commit summary to left. It looks better.
2017-02-24 17:41:14 +01:00
Marcin Kuzminski
2e08f6bd4a
ui: use monospace fonts on clone urls.
2017-02-24 14:33:06 +01:00
Marcin Kuzminski
4392d7803f
slack: updated slack integration to use the attachements for nicer formatting.
2017-02-24 14:24:19 +01:00
Marcin Kuzminski
dae4affd34
events: fix wrongly returned author data.
2017-02-24 13:23:27 +01:00
Marcin Kuzminski
dbb53dfceb
system-info: expose workers of vcsserver in system info data.
2017-02-23 21:33:49 +01:00
Marcin Kuzminski
4d847d7286
system-info: added more details about CPU.
2017-02-23 20:27:20 +01:00
Marcin Kuzminski
64c3dbee7b
system-info: added info about workers and worker type.
2017-02-23 20:17:40 +01:00
Marcin Kuzminski
475866e1b0
system-info: fix translatio of uptime string.
2017-02-23 20:17:14 +01:00
Marcin Kuzminski
1f65204749
hooks: added new pretx hook to allow mercurial checks such as protected branches, or force push.
2017-02-23 16:53:11 +01:00
Marcin Kuzminski
2ccbac2f22
auth: added selector to support new ldap admin groups sync method.
2017-02-23 13:55:50 +01:00
Marcin Kuzminski
de46f438ae
tests: fixed tests for the added extra traceback with exceptions for vcsserver.
2017-02-23 13:56:11 +01:00
Marcin Kuzminski
162aed3e96
exception-handling: propagate hooks tracebacks to vcsserver for easier debugging.
2017-02-23 12:53:24 +01:00
Marcin Kuzminski
4e957508bd
helpers: add timezone info into tooltip.
...
Fixes #5224
2017-02-22 17:20:41 +01:00
Marcin Kuzminski
ae2d789fbe
extensions: adapt hooks to latest version of extensions (pre-push)
2017-02-22 17:10:57 +01:00
Marcin Kuzminski
fb41f887c1
hooks: added extra logging.
2017-02-21 22:41:56 +01:00
Marcin Kuzminski
8ceda76718
auth: refactor code and simplified instructions.
...
- added new rfc selector
- cleanup imports
2017-02-21 18:05:29 +01:00
Marcin Kuzminski
8c73a665d3
emails: added note types into emails. Fixes #5221
2017-02-17 17:15:05 +01:00
Bartłomiej Wołyńczyk
5b6f560bdb
url-parsing: fix for bug #5218 , remove not allowed chars from uri
...
- Quoting special chars in uri, instead of removing them.
2017-02-19 17:43:34 +01:00
Marcin Kuzminski
7a52541b06
pull-requests: show version age component should use local dates.
2017-02-17 11:18:11 +01:00
Marcin Kuzminski
fc76306945
manifest: removed no longer existing file.
2017-02-16 20:41:25 +01:00
Bartłomiej Wołyńczyk
8905708fe6
Fix for bug #4155 . Fix, data change only for admin.
2017-02-16 15:56:50 +01:00
Bartłomiej Wołyńczyk
5239136f5b
Fix for bug #4155 . Modification last change date to add time zone.
2017-02-15 16:46:16 +01:00
Marcin Kuzminski
b01cc71e65
permissions: fixed text for user group creation permissions. There are no nested groups in RhodeCode
2017-02-15 21:51:06 +01:00
Marcin Kuzminski
53298a3590
pull-requests: forbid browsing versions on closed pull request.
2017-02-15 17:05:35 +01:00
Marcin Kuzminski
89dc191e0d
pull-requests: add explicit CLOSE pr action instead of closed status from selector.
...
- This is much better UX
- we set status based on calculated review
- fixes #5215
2017-02-15 11:48:54 +01:00
Marcin Kuzminski
dd066f083a
comments: unlock submit if we use slash commands to set status.
2017-02-14 13:22:55 +01:00
Marcin Kuzminski
023b9f2cf2
auth: make owner of user group give proper admin permissions to the user group.
...
This makes the behaviour consisten with repositories and repository groups.
2017-02-15 11:44:36 +01:00
Marcin Kuzminski
80c27a98f8
tests: improved test utils.
...
- better assert errors
- allow owner to be set consistently
2017-02-14 12:02:50 +01:00
Marcin Kuzminski
4ad57f8cca
conf: updated Apache config with keepalive and timeout.
...
Fixes #5213
2017-02-14 09:42:04 +01:00
Marcin Kuzminski
7f39c56d68
release: merge back stable branch into default
2017-02-13 20:01:44 +01:00
Marcin Kuzminski
14f3531f1f
Added tag v4.6.1 for changeset 5ad13deb9118
2017-02-13 18:40:17 +01:00
Marcin Kuzminski
93931f900d
release: Finish preparation for 4.6.1
2017-02-13 18:40:17 +01:00
Marcin Kuzminski
563c39a820
release: updated pip2nix output for 4.6.1
2017-02-13 18:40:15 +01:00
Marcin Kuzminski
ea1b458839
release: Start preparation for 4.6.1
2017-02-13 18:30:46 +01:00
Marcin Kuzminski
081b8d5b22
docs: added release notes for 4.6.1
2017-02-13 17:49:44 +01:00
Marcin Kuzminski
dc8777ebe2
events: make the System URL extraction safer.
...
Prevents any possible errors inside events.
2017-02-13 17:08:28 +01:00
Marcin Kuzminski
1f542f99c0
http-proto: in case incoming requests come in as chunked stream the data to VCSServer.
...
This should solve a problem of uploading large files to rhodecode. In case of
git with small postBuffers GIT client streams data to the server. In such
case we want to stream the data back again to vcsserver without reading it fully
inside RhodeCode.
2017-02-10 16:25:06 +01:00
Marcin Kuzminski
332dcebbbf
events: make the System URL extraction safer.
...
Prevents any possible errors inside events.
2017-02-13 17:08:28 +01:00
Marcin Kuzminski
8801d9b23c
events: fixed missing construcors on user based events.
2017-02-13 16:26:08 +01:00
Marcin Kuzminski
163ab1c823
api-events: fix a case events were called from API and we couldn't fetch registered user.
...
- Fixes #5210
2017-02-13 13:04:48 +01:00
Marcin Kuzminski
445ef262a7
docs: updated contribution and dev setup docs.
2017-02-13 12:02:51 +01:00
Marcin Kuzminski
886cc7d28b
http-proto: in case incoming requests come in as chunked stream the data to VCSServer.
...
This should solve a problem of uploading large files to rhodecode. In case of
git with small postBuffers GIT client streams data to the server. In such
case we want to stream the data back again to vcsserver without reading it fully
inside RhodeCode.
2017-02-10 16:25:06 +01:00
Marcin Kuzminski
5117356811
events: fixed missing construcors on user based events.
2017-02-13 16:26:08 +01:00
Marcin Kuzminski
5c2c266ee9
auth-tokens: updated logic of authentication to a common shared user method.
2017-02-13 14:36:48 +01:00
Marcin Kuzminski
be8db660b1
api-events: fix a case events were called from API and we couldn't fetch registered user.
...
- Fixes #5210
2017-02-13 13:04:48 +01:00
Marcin Kuzminski
c29ad8fdb1
tests: fixed tests case when we tested token deletion and purged all tokens in the system.
2017-02-13 11:25:29 +01:00
Marcin Kuzminski
620f65b687
docs: updated contribution and dev setup docs.
2017-02-13 12:02:51 +01:00
Marcin Kuzminski
6568814f98
api: add get_method API call.
...
- in addition use it's mechanics to propose users other methods if the
calling method is not found.
2017-02-10 16:24:57 +01:00