engineering/unrhodecode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
4796 commits 1 branch 0 tags 110 MiB
Commit graph

60 commits

Author SHA1 Message Date
Milka Kuzminski
5590b13ef5 auth: allow custom name for plugins if defined in the settings. 2020-11-03 13:25:13 +01:00
Daniel Dourvaris
0937ed89a1 auth-crawd: py3 compat 2020-05-20 10:44:04 +02:00
Marcin Kuzminski
fe96e16646 code: update copyrights to 2020 2020-04-16 00:34:52 +02:00
Marcin Kuzminski
13f313d4b5 ldap: changed plugin to help with debugging and error handling. 
- mostly based from support.
 2020-04-15 14:47:52 +02:00
Marcin Kuzminski
90b8007935 ldap: fixed ldaps port example to correct number. 2020-04-06 16:51:44 +02:00
Marcin Kuzminski
b7e6ccbdc0 ldap: logging fixes 2020-03-19 14:20:23 +01:00
Daniel Dourvaris
53980d49a6 authentication: allow super-admins to change bound authentication for users. 
- we had many requests from admins on doing so, after connecting LDAP/Saml
- since admins actually started doing this via DB it's no longer a point we shouldn't enable it via UI
 2019-10-10 14:08:11 +02:00
Marcin Kuzminski
6a6d8fa92c auth: add scope and login restrictions to rhodecode plugin, and scope restriction to token plugin. 
- allows limiting the usage of builtin auth to HTTP only (so force usage of tokens)
- allows migration to something like saml keeping only super-admin for login.
 2019-01-16 11:03:28 +01:00
Marcin Kuzminski
26b57aead0 authentication: introduce login restriction option for builtin rhodecode plugin. 2019-01-15 11:26:25 +01:00
Marcin Kuzminski
1ead0d3876 auth: login/registration changes for upcomming new rules for login using external identities. 
- show session expiration
 2019-01-15 11:34:50 +01:00
Marcin Kuzminski
bd1a9c8201 docs: updated copyrights to 2019 2019-01-02 18:13:27 +01:00
Marcin Kuzminski
cbff54d3ed docs: added SAML documentation. 
- Remove few obsolete replaces
- update authentication docs
- cleanups and fixes
 2018-11-30 07:37:45 +01:00
Marcin Kuzminski
d7fe00f943 auth: add better logging for ldap related attributes to help track problems 2018-12-05 19:07:17 +01:00
Marcin Kuzminski
739fc96fe7 auth-plugins: updated some code for better unicode compat. 2018-11-29 18:14:14 +01:00
Marcin Kuzminski
09013efd3b auth-plugins: some code cleanup + added docs for main plugin. 2018-11-28 13:42:28 +01:00
Marcin Kuzminski
c258d66e7b authentication: use registerd UID for plugin definition for more consistent loading of auth plugins. 2018-11-26 23:11:52 +01:00
Marcin Kuzminski
f33e0ddc9f core: change from homebrew plugin system into pyramid machinery. 
- it's faster to load
- homebrew system was never used as intended
- it's cleaner CE/EE code this way
 2018-11-25 11:56:29 +01:00
Marcin Kuzminski
e1bbb01dab ldap: adde common ldap-ce na ldap-ee structure, and extend options 
- added timeout
- make the code more shared
- allow specification of tls certdir and certfile manually
 2018-11-25 18:47:15 +01:00
Marcin Kuzminski
fc6891786b auth-plugins: updated display names of plugins, and root resource. 2018-11-21 18:51:34 +01:00
Marcin Kuzminski
3947a873c5 auth-plugins: expose docs and icon methods for authentication. 2018-11-21 18:43:26 +01:00
Marcin Kuzminski
215c7d3beb ldap: ensure the proper cert files and dirs are set. 
- addresses some issues with SSL certificates after bump of the LDAP drivers.
 2018-11-20 22:05:34 +01:00
Marcin Kuzminski
9033601562 logging: use lazy parameter evaluation in log calls. 2018-09-13 17:41:35 +02:00
Marcin Kuzminski
490e2c8a57 dependencies: bumped python-pam to 1.8.4 and fixed pam auth. 2018-07-31 16:56:20 +02:00
Marcin Kuzminski
213cf5463d release: merge back stable branch into default 2018-05-15 16:04:13 +02:00
Marcin Kuzminski
12d382294e ldap: use connection ping only in case of single server specifed. 2018-05-04 16:13:31 +02:00
Marcin Kuzminski
a9aca0d074 email: added help block on where to change email settings 2018-04-25 12:02:44 +02:00
Marcin Kuzminski
f7c75e1cf6 auth: use more consistent logging on failed logs. 
- auth-token, auth-rhodecode uses info for OK, and warn for failed logins.
- using error logs can cause wrong expectations about failure to loging due to an error.
 2018-04-09 13:31:57 +02:00
Marcin Kuzminski
a8428e7271 auth-ldap: added connection pinning and timeout option to ldap plugin 2018-03-27 11:51:37 +02:00
Marcin Kuzminski
d06a62c340 logging: improve consistency of auth plugins logs. 2018-02-19 14:49:21 +01:00
Marcin Kuzminski
0cbdfc3f23 ldap: enable connection recycling on LDAP plugin. 2018-02-16 10:57:29 +01:00
Marcin Kuzminski
90120e6678 authentication: introduce a group sync flag for plugins. 
- we'll skip any syncing on plugins which simply don't get any group information
- we let plugins define if they wish to sync groups
- prevent from odd cases in which someone sets user groups as syncing, and using regular
plugin. In this case memebership of that group would be wiped, and it's generaly bad behaviour.
 2018-01-24 16:47:06 +01:00
Marcin Kuzminski
00b45c1fa7 release: update copyright year to 2018 2018-01-19 17:13:16 +01:00
Marcin Kuzminski
7a512a4788 ldap: fixed regression in extracting settings after library updates. 
- somehow we now got '' defaulted to None which changed the behaviour.
 2017-11-11 16:43:45 +01:00
Marcin Kuzminski
7de15715e0 ldap: increase timeouts and timelimits for operations 2017-11-11 10:29:31 +01:00
Marcin Kuzminski
34175fd787 auth-rhodecode: don't fail on bcrypt if user password is set to None. 
Default to emptry string to not cause an exception.
 2017-10-07 10:02:57 +02:00
Marcin Kuzminski
c81494c245 auth: remove usage of pylons translator 2017-09-19 12:41:53 +02:00
Marcin Kuzminski
ee0e7c21f8 users: make AuthUser propert a method, and allow override of params. 2017-08-03 20:17:46 +02:00
Marcin Kuzminski
c03f634951 auth-ldap: improve messages when users failed to authenticate. Fixes #5345 2017-06-30 15:09:12 +02:00
Marcin Kuzminski
587e36d745 auth-plugins: updated description on auth_ldap plugin servers. 2017-06-01 12:46:15 +02:00
Marcin Kuzminski
8890b4a0da ldap: addedn info about custom certificates option 2017-05-12 11:05:39 +02:00
Marcin Kuzminski
5fc5ee4d35 auth-plugins: define unsafe settings 2017-04-10 17:16:17 +02:00
Marcin Kuzminski
8732733a54 authentication: enabled authentication with auth_token and repository scope. 
- fixes #3932
- vcs type tokens now with repo scope narrows the usage to a repository.
 2017-03-03 20:48:23 +01:00
Marcin Kuzminski
8ceda76718 auth: refactor code and simplified instructions. 
- added new rfc selector
- cleanup imports
 2017-02-21 18:05:29 +01:00
Marcin Kuzminski
5c2c266ee9 auth-tokens: updated logic of authentication to a common shared user method. 2017-02-13 14:36:48 +01:00
Marcin Kuzminski
89e2586781 templating: use .mako as extensions for template files. 2017-01-04 22:13:57 +01:00
Marcin Kuzminski
fcc027c282 license: updated copyright year to 2017 2017-01-02 09:30:39 +01:00
Marcin Kuzminski
c0e4fc7dcd ldap: fixed email extraction typo. An empty 
ldap email will now not overwritt the stored one.
 2016-09-30 16:19:12 +02:00
Marcin Kuzminski
d0638fa1a1 auth-ldap: added flag to set debug mode for LDAP connections. 2016-07-26 13:09:56 +02:00
Marcin Kuzminski
08000af552 auth: made the message about not-active user consisten with token plugin 2016-07-13 12:27:04 +02:00
Marcin Kuzminski
ab6750c9a7 auth-token: allow other authentication types to use auth-token. 
Fixes #4070
 2016-07-12 19:56:48 +02:00