Commit graph

1472 commits

Author SHA1 Message Date
Marcin Kuzminski
0ca4b7cbfc password-reset: strengthten security on password reset logic.
- generate token that has special password reset role
- set 10 minut expiration on the token
- add some sleep to prevent bruteforcing attacks
- use implicit messages to prevent user email discovery attacks
2017-02-26 21:28:09 +01:00
Marcin Kuzminski
eb8c2fe3d1 helper-blocks: fix pre formatting only for auth plugin helper texts.
- leave other as they can break if we apply same for all helper blocks.
2017-02-25 10:20:10 +01:00
Marcin Kuzminski
732e6c0240 pull-requests: move text with commit summary to left. It looks better. 2017-02-24 17:41:14 +01:00
Marcin Kuzminski
2e08f6bd4a ui: use monospace fonts on clone urls. 2017-02-24 14:33:06 +01:00
Marcin Kuzminski
4392d7803f slack: updated slack integration to use the attachements for nicer formatting. 2017-02-24 14:24:19 +01:00
Marcin Kuzminski
dae4affd34 events: fix wrongly returned author data. 2017-02-24 13:23:27 +01:00
Marcin Kuzminski
dbb53dfceb system-info: expose workers of vcsserver in system info data. 2017-02-23 21:33:49 +01:00
Marcin Kuzminski
4d847d7286 system-info: added more details about CPU. 2017-02-23 20:27:20 +01:00
Marcin Kuzminski
64c3dbee7b system-info: added info about workers and worker type. 2017-02-23 20:17:40 +01:00
Marcin Kuzminski
475866e1b0 system-info: fix translatio of uptime string. 2017-02-23 20:17:14 +01:00
Marcin Kuzminski
1f65204749 hooks: added new pretx hook to allow mercurial checks such as protected branches, or force push. 2017-02-23 16:53:11 +01:00
Marcin Kuzminski
2ccbac2f22 auth: added selector to support new ldap admin groups sync method. 2017-02-23 13:55:50 +01:00
Marcin Kuzminski
de46f438ae tests: fixed tests for the added extra traceback with exceptions for vcsserver. 2017-02-23 13:56:11 +01:00
Marcin Kuzminski
162aed3e96 exception-handling: propagate hooks tracebacks to vcsserver for easier debugging. 2017-02-23 12:53:24 +01:00
Marcin Kuzminski
4e957508bd helpers: add timezone info into tooltip.
Fixes #5224
2017-02-22 17:20:41 +01:00
Marcin Kuzminski
ae2d789fbe extensions: adapt hooks to latest version of extensions (pre-push) 2017-02-22 17:10:57 +01:00
Marcin Kuzminski
fb41f887c1 hooks: added extra logging. 2017-02-21 22:41:56 +01:00
Marcin Kuzminski
8ceda76718 auth: refactor code and simplified instructions.
- added new rfc selector
- cleanup imports
2017-02-21 18:05:29 +01:00
Marcin Kuzminski
8c73a665d3 emails: added note types into emails. Fixes #5221 2017-02-17 17:15:05 +01:00
Bartłomiej Wołyńczyk
5b6f560bdb url-parsing: fix for bug #5218, remove not allowed chars from uri
- Quoting special chars in  uri, instead of removing them.
2017-02-19 17:43:34 +01:00
Marcin Kuzminski
7a52541b06 pull-requests: show version age component should use local dates. 2017-02-17 11:18:11 +01:00
Marcin Kuzminski
fc76306945 manifest: removed no longer existing file. 2017-02-16 20:41:25 +01:00
Bartłomiej Wołyńczyk
8905708fe6 Fix for bug #4155. Fix, data change only for admin. 2017-02-16 15:56:50 +01:00
Bartłomiej Wołyńczyk
5239136f5b Fix for bug #4155. Modification last change date to add time zone. 2017-02-15 16:46:16 +01:00
Marcin Kuzminski
b01cc71e65 permissions: fixed text for user group creation permissions. There are no nested groups in RhodeCode 2017-02-15 21:51:06 +01:00
Marcin Kuzminski
53298a3590 pull-requests: forbid browsing versions on closed pull request. 2017-02-15 17:05:35 +01:00
Marcin Kuzminski
89dc191e0d pull-requests: add explicit CLOSE pr action instead of closed status from selector.
- This is much better UX
- we set status based on calculated review
- fixes #5215
2017-02-15 11:48:54 +01:00
Marcin Kuzminski
dd066f083a comments: unlock submit if we use slash commands to set status. 2017-02-14 13:22:55 +01:00
Marcin Kuzminski
023b9f2cf2 auth: make owner of user group give proper admin permissions to the user group.
This makes the behaviour consisten with repositories and repository groups.
2017-02-15 11:44:36 +01:00
Marcin Kuzminski
80c27a98f8 tests: improved test utils.
- better assert errors
- allow owner to be set consistently
2017-02-14 12:02:50 +01:00
Marcin Kuzminski
4ad57f8cca conf: updated Apache config with keepalive and timeout.
Fixes #5213
2017-02-14 09:42:04 +01:00
Marcin Kuzminski
7f39c56d68 release: merge back stable branch into default 2017-02-13 20:01:44 +01:00
Marcin Kuzminski
14f3531f1f Added tag v4.6.1 for changeset 5ad13deb9118 2017-02-13 18:40:17 +01:00
Marcin Kuzminski
93931f900d release: Finish preparation for 4.6.1 2017-02-13 18:40:17 +01:00
Marcin Kuzminski
563c39a820 release: updated pip2nix output for 4.6.1 2017-02-13 18:40:15 +01:00
Marcin Kuzminski
ea1b458839 release: Start preparation for 4.6.1 2017-02-13 18:30:46 +01:00
Marcin Kuzminski
081b8d5b22 docs: added release notes for 4.6.1 2017-02-13 17:49:44 +01:00
Marcin Kuzminski
dc8777ebe2 events: make the System URL extraction safer.
Prevents any possible errors inside events.
2017-02-13 17:08:28 +01:00
Marcin Kuzminski
1f542f99c0 http-proto: in case incoming requests come in as chunked stream the data to VCSServer.
This should solve a problem of uploading large files to rhodecode. In case of
git with small postBuffers GIT client streams data to the server. In such
case we want to stream the data back again to vcsserver without reading it fully
inside RhodeCode.
2017-02-10 16:25:06 +01:00
Marcin Kuzminski
332dcebbbf events: make the System URL extraction safer.
Prevents any possible errors inside events.
2017-02-13 17:08:28 +01:00
Marcin Kuzminski
8801d9b23c events: fixed missing construcors on user based events. 2017-02-13 16:26:08 +01:00
Marcin Kuzminski
163ab1c823 api-events: fix a case events were called from API and we couldn't fetch registered user.
- Fixes #5210
2017-02-13 13:04:48 +01:00
Marcin Kuzminski
445ef262a7 docs: updated contribution and dev setup docs. 2017-02-13 12:02:51 +01:00
Marcin Kuzminski
886cc7d28b http-proto: in case incoming requests come in as chunked stream the data to VCSServer.
This should solve a problem of uploading large files to rhodecode. In case of
git with small postBuffers GIT client streams data to the server. In such
case we want to stream the data back again to vcsserver without reading it fully
inside RhodeCode.
2017-02-10 16:25:06 +01:00
Marcin Kuzminski
5117356811 events: fixed missing construcors on user based events. 2017-02-13 16:26:08 +01:00
Marcin Kuzminski
5c2c266ee9 auth-tokens: updated logic of authentication to a common shared user method. 2017-02-13 14:36:48 +01:00
Marcin Kuzminski
be8db660b1 api-events: fix a case events were called from API and we couldn't fetch registered user.
- Fixes #5210
2017-02-13 13:04:48 +01:00
Marcin Kuzminski
c29ad8fdb1 tests: fixed tests case when we tested token deletion and purged all tokens in the system. 2017-02-13 11:25:29 +01:00
Marcin Kuzminski
620f65b687 docs: updated contribution and dev setup docs. 2017-02-13 12:02:51 +01:00
Marcin Kuzminski
6568814f98 api: add get_method API call.
- in addition use it's mechanics to propose users other methods if the
calling method is not found.
2017-02-10 16:24:57 +01:00