Commit graph

22 commits

Author SHA1 Message Date
Marcin Kuzminski
8417882de5 auth-plugins: add mechanismy to remove secrets from plugin logs.
- it's not recommended to log things like ldap access passwords or
other credentials.
-  we expose a machanismy for each plugin to define a unsafe keys to be
removed.
2017-04-10 17:14:07 +02:00
Marcin Kuzminski
662dda4aa7 auth-plugins: remove dead code 2017-04-10 17:13:09 +02:00
Marcin Kuzminski
8732733a54 authentication: enabled authentication with auth_token and repository scope.
- fixes #3932
- vcs type tokens now with repo scope narrows the usage to a repository.
2017-03-03 20:48:23 +01:00
Marcin Kuzminski
94cd7b2237 authentication: add some more logging when extracting users. 2017-03-03 20:11:35 +01:00
Marcin Kuzminski
8ceda76718 auth: refactor code and simplified instructions.
- added new rfc selector
- cleanup imports
2017-02-21 18:05:29 +01:00
Marcin Kuzminski
fcc027c282 license: updated copyright year to 2017 2017-01-02 09:30:39 +01:00
Martin Bornhold
72819c6826 auth: Allow auth plugins to customize the slug which is used to generate URLs. #4078 2016-10-28 14:03:27 +02:00
Martin Bornhold
c46ad9f215 vcs: Pass registry to vcs for user authentication.
Explicit pass the registry insted of indirectly using it via pyramids
thread locals.
2016-08-08 08:29:10 +02:00
Martin Bornhold
bee42a50ed auth: Fix renaming of 'auth_cahe_ttl' to 'cache_ttl' #4127 2016-07-27 15:54:42 +02:00
Marcin Kuzminski
af6f54dbae auth-plugins: added better log message about the auth-cache-ttl settings. 2016-07-26 13:09:31 +02:00
Marcin Kuzminski
ab6750c9a7 auth-token: allow other authentication types to use auth-token.
Fixes #4070
2016-07-12 19:56:48 +02:00
Johannes Bornhold
cf906eafe6 authn: Use type() instead of __class__ attribute. 2016-06-21 08:09:55 +02:00
Johannes Bornhold
a1b5f9d602 authn: Allow to pass in a default value if setting is not available in DB. 2016-06-20 17:25:35 +02:00
Johannes Bornhold
825e26db6f authn: Don't use setting value to compute the setting type. 2016-06-20 11:52:24 +02:00
Johannes Bornhold
4e9923b5ae auth: Implement __str__ on plugin base class
This way some error messages will look nicer, since they are based on the
__str__ of the plugin instance. Using the plugin_id will give the user (and us
in the support case) the exact pointer to the affected plugins.
2016-06-16 09:11:45 +02:00
Johannes Bornhold
d05c4fb045 authn: Use new is_headers_auth function. 2016-06-06 10:15:00 +02:00
Johannes Bornhold
50474589c2 authn: Deprecate the is_container_auth function. 2016-06-06 10:22:42 +02:00
Johannes Bornhold
a29b8b84a5 authn: Rename 'container' -> 'headers' in authentication. 2016-06-06 10:33:01 +02:00
Johannes Bornhold
a44e92e154 authn: Fix form validation of authentication plugins.
- Check if plugin exists.
- Display an apropriate error message if it doesn't exist.
2016-06-03 11:22:13 +02:00
Johannes Bornhold
b3562f3708 authn: Add an INI option to set an authentication plugin fallback. #3953
If you set 'rhodecode.auth_plugin_fallback = egg:rhodecode-enterprise-ce#rhodecode'
in your INI file the rhodecode auth plugin is always appended to the list of plugins
that are used for authentication.
2016-05-27 10:36:30 +02:00
Johannes Bornhold
ce2aa59dea auth: Remove AuthomaticBase class.
- Code will be moved to the EE version.
2016-05-24 15:41:09 +02:00
Marcin Kuzminski
9a0d8c0b77 project: added all source files and assets 2016-05-24 15:56:53 +02:00