Commit graph

76 commits

Author SHA1 Message Date
ievgenii vdovenko
2dcb9984c7 feature: implemented deleting user and migrating all user assets new system ghost user 2025-07-25 15:43:29 +02:00
RhodeCode Admin
166db21812 core: run ruff format 2025-01-13 17:47:37 +01:00
RhodeCode Admin
82f0f8d214 core: updated copyright to 2024 2024-11-12 16:39:07 +01:00
Serhii Ilin
d069311e52 feat(2fa): added 2fa for more auth plugins and moved 2fa forced functionality to ee edition. Fixes: RCCE-68 2024-05-13 16:24:31 +03:00
Serhii Ilin
9678665ecd feat(2fa): Added 2fa option. Fixes: RCCE-65 2024-04-15 12:13:03 +03:00
Serhii Ilin
d8281bb5c0 feat(login by email option): added ability to log in with user primary email. Fixes: RCCE-63 2024-03-14 11:18:07 +02:00
RhodeCode Admin
c8b35a769a ldap: small fixes and improvements over ldap authentication 2023-08-21 09:40:30 +02:00
RhodeCode Admin
a6e9ccf9e0 authentication: run modernize for python3 2023-07-18 14:26:37 +02:00
RhodeCode Admin
3c7a0fe047 lint: ruff run 2023-07-18 13:46:39 +02:00
RhodeCode Admin
42301154fc copyrights: updated for 2023 2023-07-18 11:57:27 +02:00
RhodeCode Admin
2ff61d5c42 authentication: fixed for python3 migrations 2023-07-18 11:00:47 +02:00
RhodeCode Admin
d985e2f96c authentications: remove utf8 markers 2023-07-18 11:00:05 +02:00
RhodeCode Admin
34af9cfa2f python3: fixed various code issues
- iterators
- use of u''
2023-03-20 20:51:25 +01:00
RhodeCode Admin
c22758550a python3: fix urllib usage 2023-03-06 22:00:27 +01:00
RhodeCode Admin
8a95bb9eb4 logging: changed module in logs extra as it is a reserved keyword 2022-10-27 22:54:02 +02:00
RhodeCode Admin
faa449987b logging: expose extra metadata to various important logs for loki 2022-10-27 22:49:17 +02:00
Milka Kuzminski
5590b13ef5 auth: allow custom name for plugins if defined in the settings. 2020-11-03 13:25:13 +01:00
Daniel Dourvaris
0937ed89a1 auth-crawd: py3 compat 2020-05-20 10:44:04 +02:00
Marcin Kuzminski
fe96e16646 code: update copyrights to 2020 2020-04-16 00:34:52 +02:00
Marcin Kuzminski
13f313d4b5 ldap: changed plugin to help with debugging and error handling.
- mostly based from support.
2020-04-15 14:47:52 +02:00
Marcin Kuzminski
90b8007935 ldap: fixed ldaps port example to correct number. 2020-04-06 16:51:44 +02:00
Marcin Kuzminski
b7e6ccbdc0 ldap: logging fixes 2020-03-19 14:20:23 +01:00
Daniel Dourvaris
53980d49a6 authentication: allow super-admins to change bound authentication for users.
- we had many requests from admins on doing so, after connecting LDAP/Saml
- since admins actually started doing this via DB it's no longer a point we shouldn't enable it via UI
2019-10-10 14:08:11 +02:00
Marcin Kuzminski
6a6d8fa92c auth: add scope and login restrictions to rhodecode plugin, and scope restriction to token plugin.
- allows limiting the usage of builtin auth to HTTP only (so force usage of tokens)
- allows migration to something like saml keeping only super-admin for login.
2019-01-16 11:03:28 +01:00
Marcin Kuzminski
26b57aead0 authentication: introduce login restriction option for builtin rhodecode plugin. 2019-01-15 11:26:25 +01:00
Marcin Kuzminski
1ead0d3876 auth: login/registration changes for upcomming new rules for login using external identities.
- show session expiration
2019-01-15 11:34:50 +01:00
Marcin Kuzminski
bd1a9c8201 docs: updated copyrights to 2019 2019-01-02 18:13:27 +01:00
Marcin Kuzminski
cbff54d3ed docs: added SAML documentation.
- Remove few obsolete replaces
- update authentication docs
- cleanups and fixes
2018-11-30 07:37:45 +01:00
Marcin Kuzminski
d7fe00f943 auth: add better logging for ldap related attributes to help track problems 2018-12-05 19:07:17 +01:00
Marcin Kuzminski
739fc96fe7 auth-plugins: updated some code for better unicode compat. 2018-11-29 18:14:14 +01:00
Marcin Kuzminski
09013efd3b auth-plugins: some code cleanup + added docs for main plugin. 2018-11-28 13:42:28 +01:00
Marcin Kuzminski
c258d66e7b authentication: use registerd UID for plugin definition for more consistent loading of auth plugins. 2018-11-26 23:11:52 +01:00
Marcin Kuzminski
f33e0ddc9f core: change from homebrew plugin system into pyramid machinery.
- it's faster to load
- homebrew system was never used as intended
- it's cleaner CE/EE code this way
2018-11-25 11:56:29 +01:00
Marcin Kuzminski
e1bbb01dab ldap: adde common ldap-ce na ldap-ee structure, and extend options
- added timeout
- make the code more shared
- allow specification of tls certdir and certfile manually
2018-11-25 18:47:15 +01:00
Marcin Kuzminski
fc6891786b auth-plugins: updated display names of plugins, and root resource. 2018-11-21 18:51:34 +01:00
Marcin Kuzminski
3947a873c5 auth-plugins: expose docs and icon methods for authentication. 2018-11-21 18:43:26 +01:00
Marcin Kuzminski
215c7d3beb ldap: ensure the proper cert files and dirs are set.
- addresses some issues with SSL certificates after bump of the LDAP drivers.
2018-11-20 22:05:34 +01:00
Marcin Kuzminski
9033601562 logging: use lazy parameter evaluation in log calls. 2018-09-13 17:41:35 +02:00
Marcin Kuzminski
490e2c8a57 dependencies: bumped python-pam to 1.8.4 and fixed pam auth. 2018-07-31 16:56:20 +02:00
Marcin Kuzminski
213cf5463d release: merge back stable branch into default 2018-05-15 16:04:13 +02:00
Marcin Kuzminski
12d382294e ldap: use connection ping only in case of single server specifed. 2018-05-04 16:13:31 +02:00
Marcin Kuzminski
a9aca0d074 email: added help block on where to change email settings 2018-04-25 12:02:44 +02:00
Marcin Kuzminski
f7c75e1cf6 auth: use more consistent logging on failed logs.
- auth-token, auth-rhodecode uses info for OK, and warn for failed logins.
- using error logs can cause wrong expectations about failure to loging due to an error.
2018-04-09 13:31:57 +02:00
Marcin Kuzminski
a8428e7271 auth-ldap: added connection pinning and timeout option to ldap plugin 2018-03-27 11:51:37 +02:00
Marcin Kuzminski
d06a62c340 logging: improve consistency of auth plugins logs. 2018-02-19 14:49:21 +01:00
Marcin Kuzminski
0cbdfc3f23 ldap: enable connection recycling on LDAP plugin. 2018-02-16 10:57:29 +01:00
Marcin Kuzminski
90120e6678 authentication: introduce a group sync flag for plugins.
- we'll skip any syncing on plugins which simply don't get any group information
- we let plugins define if they wish to sync groups
- prevent from odd cases in which someone sets user groups as syncing, and using regular
plugin. In this case memebership of that group would be wiped, and it's generaly bad behaviour.
2018-01-24 16:47:06 +01:00
Marcin Kuzminski
00b45c1fa7 release: update copyright year to 2018 2018-01-19 17:13:16 +01:00
Marcin Kuzminski
7a512a4788 ldap: fixed regression in extracting settings after library updates.
- somehow we now got '' defaulted to None which changed the behaviour.
2017-11-11 16:43:45 +01:00
Marcin Kuzminski
7de15715e0 ldap: increase timeouts and timelimits for operations 2017-11-11 10:29:31 +01:00