Commit graph

1508 commits

Author SHA1 Message Date
Marcin Kuzminski
69e4e26553 auth-tokens: extended views to allowed override of adding scope in EE edition. 2017-03-03 17:54:07 +01:00
Marcin Kuzminski
2a652f5bc7 templates: removed repo_edit_fork template as it was never used. 2017-03-03 17:03:17 +01:00
Marcin Kuzminski
df90d2d6c6 my-account-auth-tokens: moved into pyramid apps.
- we're going to override this in EE edition with added functionality.
2017-03-03 14:19:34 +01:00
Marcin Kuzminski
a02807c5eb channelstream: move into apps 2017-03-02 20:34:58 +01:00
Marcin Kuzminski
ed0174e7a4 admin: moved admin pyramid into apps. 2017-03-02 20:23:26 +01:00
Marcin Kuzminski
260eea9c79 user-profile: migrated to pyramid views. 2017-03-02 18:10:10 +01:00
Marcin Kuzminski
68760efe6a login: moved to apps module 2017-03-02 16:35:07 +01:00
Marcin Kuzminski
8cd7ba5c29 rhodecode-app: added module to organize pyramid apps 2017-03-02 16:13:37 +01:00
Marcin Kuzminski
cfa10105b7 core: properly handle new redirections set in decorators.
- Allows easier full pyramid migration
2017-03-02 16:10:47 +01:00
Marcin Kuzminski
bab90b0598 slack-integration: added number of commits inside the message. 2017-03-02 12:05:09 +01:00
Marcin Kuzminski
7dd3a63a11 notifications: skip fetching of settings in notifications.
- we can re-use the .CONFIG object.
2017-03-02 10:44:51 +01:00
Marcin Kuzminski
0c6f4a5dc2 error-middleware: read title from cached rhodecode object.
- reading from settings inside error handler can cause error hiding when
error_handler was caused by database error. Db transaction is set as rollback, and re-trying to
read the settings can hide the real error.
2017-03-02 10:28:28 +01:00
Marcin Kuzminski
5ceb306fb9 jupyter-rendering: added a custom preprocessor to implement Javascript object
sandbox.

- each element that has a type javascript is replaced by a plaintext.
2017-03-01 21:51:49 +01:00
Marcin Kuzminski
e2b0f5b7cc auth: make the perms decorators and function pyramid compatible. 2017-02-28 22:21:24 +01:00
Marcin Kuzminski
6e6e004d14 packaging: don't run strip on sources for python packages 2017-03-01 17:30:18 +01:00
Marcin Kuzminski
cec205e2b8 jupyter-rendering: limit fonts types to the default ones.
- limits the possibilities of picking fonts, thus limiting required
math-jax font files.
2017-02-28 15:12:57 +01:00
Marcin Kuzminski
95a942014d jupyter-rendering: added rendering of notebook into MarkupRenderer class. 2017-02-28 14:58:23 +01:00
Marcin Kuzminski
2dd308a72b mathJax: added resources to enable rendering of math formulas. 2017-02-28 15:58:30 +01:00
Marcin Kuzminski
558982d3cb jupyter-rendering: add celery patch, to support dateutil change
required for jupyter.
2017-02-25 15:32:37 +01:00
Marcin Kuzminski
3fce2ad988 jupyter-rendering: add required packaging to handle rendering of jupyter notebooks.
- added nbgenerate, and other related libs.
2017-02-25 15:22:11 +01:00
Marcin Kuzminski
3837064c8c my-account: use consistent naming for my account menu.
- removed My prefix as it was obsolete in this menu context.
2017-03-01 13:54:56 +01:00
Marcin Kuzminski
36ec943b74 toasts: hide messages on escape. 2017-03-01 15:23:17 +01:00
Marcin Kuzminski
60f7192c2c rhodecode-toasts: added flash toast into pages that don't inherit from base. 2017-03-01 13:46:59 +01:00
Marcin Kuzminski
aa5952b45a rhodecode-toast: css improvements. 2017-03-01 10:25:10 +01:00
Marcin Lulek
d4d6fba318 notifications: different approach with fixed/standard container 2017-03-01 01:39:52 +01:00
Marcin Kuzminski
d6dfdba2a8 auth-tokens: fixed tests 2017-02-28 12:49:40 +01:00
Marcin Kuzminski
b1f8bb4212 user: remove usage of api_key.
- replace builtin one with searching external tokens
- cleanup of code and not have exposed builtin api key
- prevent of setting builtin api key
2017-02-27 19:22:54 +01:00
Marcin Kuzminski
c2a6fe9138 auth-tokens: add scope and show consitent token UI for my account and admin. 2017-02-27 17:15:55 +01:00
Marcin Kuzminski
10ce5d446b auth-tokens: remove showing builtin tokens 2017-02-27 12:04:43 +01:00
Marcin Kuzminski
bcd1b3ff15 auth-tokens: don't generate builtin token for new users.
- also don't change them when password reset is made.
2017-02-27 11:59:13 +01:00
Marcin Kuzminski
ab24af89d2 auth-tokens: disable authenticating by builtin token. 2017-02-27 11:45:30 +01:00
Marcin Kuzminski
661a9546d7 auth-tokens: migrate builtin token to the external ones 2017-02-27 12:16:11 +01:00
Marcin Kuzminski
73ad8eebf0 auth-tokens: added scope into auth tokens (ApiKeys before refactoring)
- allows to have scoped tokens, ie. just for single repo.
- fix migration problems found on introducing this change

ref #3932
2017-02-24 17:48:18 +01:00
Marcin Kuzminski
64e7b08b8c password-reset: improved error reporting for captch and empty email 2017-02-28 11:30:29 +01:00
Marcin Kuzminski
0ab5270199 files: make sure code tags don't have excesive spacing. 2017-02-25 23:22:36 +01:00
Marcin Kuzminski
7c2dd88d85 helpers: add possibility to add GET flags into assets. 2017-02-25 17:05:52 +01:00
Marcin Kuzminski
0ca4b7cbfc password-reset: strengthten security on password reset logic.
- generate token that has special password reset role
- set 10 minut expiration on the token
- add some sleep to prevent bruteforcing attacks
- use implicit messages to prevent user email discovery attacks
2017-02-26 21:28:09 +01:00
Marcin Kuzminski
eb8c2fe3d1 helper-blocks: fix pre formatting only for auth plugin helper texts.
- leave other as they can break if we apply same for all helper blocks.
2017-02-25 10:20:10 +01:00
Marcin Kuzminski
732e6c0240 pull-requests: move text with commit summary to left. It looks better. 2017-02-24 17:41:14 +01:00
Marcin Kuzminski
2e08f6bd4a ui: use monospace fonts on clone urls. 2017-02-24 14:33:06 +01:00
Marcin Kuzminski
4392d7803f slack: updated slack integration to use the attachements for nicer formatting. 2017-02-24 14:24:19 +01:00
Marcin Kuzminski
dae4affd34 events: fix wrongly returned author data. 2017-02-24 13:23:27 +01:00
Marcin Kuzminski
dbb53dfceb system-info: expose workers of vcsserver in system info data. 2017-02-23 21:33:49 +01:00
Marcin Kuzminski
4d847d7286 system-info: added more details about CPU. 2017-02-23 20:27:20 +01:00
Marcin Kuzminski
64c3dbee7b system-info: added info about workers and worker type. 2017-02-23 20:17:40 +01:00
Marcin Kuzminski
475866e1b0 system-info: fix translatio of uptime string. 2017-02-23 20:17:14 +01:00
Marcin Kuzminski
1f65204749 hooks: added new pretx hook to allow mercurial checks such as protected branches, or force push. 2017-02-23 16:53:11 +01:00
Marcin Kuzminski
2ccbac2f22 auth: added selector to support new ldap admin groups sync method. 2017-02-23 13:55:50 +01:00
Marcin Kuzminski
de46f438ae tests: fixed tests for the added extra traceback with exceptions for vcsserver. 2017-02-23 13:56:11 +01:00
Marcin Kuzminski
162aed3e96 exception-handling: propagate hooks tracebacks to vcsserver for easier debugging. 2017-02-23 12:53:24 +01:00