Marcin Kuzminski
8417882de5
auth-plugins: add mechanismy to remove secrets from plugin logs.
...
- it's not recommended to log things like ldap access passwords or
other credentials.
- we expose a machanismy for each plugin to define a unsafe keys to be
removed.
2017-04-10 17:14:07 +02:00
Marcin Kuzminski
662dda4aa7
auth-plugins: remove dead code
2017-04-10 17:13:09 +02:00
Marcin Kuzminski
8732733a54
authentication: enabled authentication with auth_token and repository scope.
...
- fixes #3932
- vcs type tokens now with repo scope narrows the usage to a repository.
2017-03-03 20:48:23 +01:00
Marcin Kuzminski
94cd7b2237
authentication: add some more logging when extracting users.
2017-03-03 20:11:35 +01:00
Marcin Kuzminski
8ceda76718
auth: refactor code and simplified instructions.
...
- added new rfc selector
- cleanup imports
2017-02-21 18:05:29 +01:00
Marcin Kuzminski
fcc027c282
license: updated copyright year to 2017
2017-01-02 09:30:39 +01:00
Martin Bornhold
72819c6826
auth: Allow auth plugins to customize the slug which is used to generate URLs. #4078
2016-10-28 14:03:27 +02:00
Martin Bornhold
c46ad9f215
vcs: Pass registry to vcs for user authentication.
...
Explicit pass the registry insted of indirectly using it via pyramids
thread locals.
2016-08-08 08:29:10 +02:00
Martin Bornhold
bee42a50ed
auth: Fix renaming of 'auth_cahe_ttl' to 'cache_ttl' #4127
2016-07-27 15:54:42 +02:00
Marcin Kuzminski
af6f54dbae
auth-plugins: added better log message about the auth-cache-ttl settings.
2016-07-26 13:09:31 +02:00
Marcin Kuzminski
ab6750c9a7
auth-token: allow other authentication types to use auth-token.
...
Fixes #4070
2016-07-12 19:56:48 +02:00
Johannes Bornhold
cf906eafe6
authn: Use type() instead of __class__ attribute.
2016-06-21 08:09:55 +02:00
Johannes Bornhold
a1b5f9d602
authn: Allow to pass in a default value if setting is not available in DB.
2016-06-20 17:25:35 +02:00
Johannes Bornhold
825e26db6f
authn: Don't use setting value to compute the setting type.
2016-06-20 11:52:24 +02:00
Johannes Bornhold
4e9923b5ae
auth: Implement __str__ on plugin base class
...
This way some error messages will look nicer, since they are based on the
__str__ of the plugin instance. Using the plugin_id will give the user (and us
in the support case) the exact pointer to the affected plugins.
2016-06-16 09:11:45 +02:00
Johannes Bornhold
d05c4fb045
authn: Use new is_headers_auth function.
2016-06-06 10:15:00 +02:00
Johannes Bornhold
50474589c2
authn: Deprecate the is_container_auth function.
2016-06-06 10:22:42 +02:00
Johannes Bornhold
a29b8b84a5
authn: Rename 'container' -> 'headers' in authentication.
2016-06-06 10:33:01 +02:00
Johannes Bornhold
a44e92e154
authn: Fix form validation of authentication plugins.
...
- Check if plugin exists.
- Display an apropriate error message if it doesn't exist.
2016-06-03 11:22:13 +02:00
Johannes Bornhold
b3562f3708
authn: Add an INI option to set an authentication plugin fallback. #3953
...
If you set 'rhodecode.auth_plugin_fallback = egg:rhodecode-enterprise-ce#rhodecode'
in your INI file the rhodecode auth plugin is always appended to the list of plugins
that are used for authentication.
2016-05-27 10:36:30 +02:00
Johannes Bornhold
ce2aa59dea
auth: Remove AuthomaticBase class.
...
- Code will be moved to the EE version.
2016-05-24 15:41:09 +02:00
Marcin Kuzminski
9a0d8c0b77
project: added all source files and assets
2016-05-24 15:56:53 +02:00