722c3bd369
Prototype: OTP auth, styleguide overhaul, login/session rework
...
Replace password reset with email OTP verification flow.
Add auth_otp module, OTP templates, and email delivery.
Expand styleguide CSS with full component library.
Rework login, register, and admin views for cookie sessions.
Remove legacy 2FA templates and password reset flow.
Update SSH wrappers, forms, validators, and middleware.
2026-03-04 16:44:40 -05:00
4f73837822
Remove beaker dependency, switch to Pyramid SignedCookieSessionFactory
...
Replace server-side session backends (redis, file, database, memcached)
with client-side signed cookie sessions. Users will need to
re-authenticate after deploy.
- Rewrite rc_beaker.py to use pyramid.session.SignedCookieSessionFactory
- Gut user_sessions.py to cookie-only stub
- Drop beaker.container from memory_lru_dict.py (pure repoze.lru)
- Migrate ini configs from beaker.session.* to session.* namespace
- Remove beaker==1.13.0 from requirements.txt
- Remove beaker.backends entry points from pyproject.toml
- Preserve backward-compat fallbacks for encryption key resolution
2026-02-19 15:26:24 -05:00
RhodeCode Admin
cafdf00501
fix(test): another attempt on flaky tests fixes
...
- cleanup DB calls for flaky tests
2026-01-21 09:10:52 +01:00
Andrii V
6fe5736648
New implementations and updates for security scan
2026-01-16 16:53:31 +01:00
Andrii V
9ce6ca8fd8
Initial implementation of security scan for PRs
2026-01-15 16:48:04 +01:00
ievgenii vdovenko
746c5b4699
feature: initial implementation of qoutas for a user, repo count part
2025-12-29 15:03:10 +01:00
RhodeCode Admin
102205ec73
feature(scm): added multibranch support for git and mercurial
2025-12-21 08:27:16 +01:00
RhodeCode Admin
9780721347
core: ruff format
2025-11-28 11:35:34 +01:00
Andrii Verbytskyi
9fe203b496
Merge pull request !2850 from rhodecode-enterprise-ce feature/RCCE-334_Button-for-Ai-code-review
...
feature: implements button to start AI code review
2025-10-31 14:38:32 +00:00
ievgenii.v
6e3aa8ed6b
feature: implements locking feature for AI review button; adds detailed audit logging
2025-10-29 16:31:07 +02:00
ievgenii.v
fe5b0d1fa2
feature: simplifies inactive user filtering; adds tests
2025-10-24 16:08:08 +03:00
ievgenii.v
07193705f4
feature: implements find\notify\delete inactive users
2025-10-23 15:54:54 +03:00
ievgenii.v
f6d1fc8f44
Revert "feature: implements find\notify\delete inactive users"
...
This reverts commit 04ba7e9b1d .
2025-10-23 15:46:37 +03:00
ievgenii.v
04ba7e9b1d
feature: implements find\notify\delete inactive users
2025-10-23 15:45:47 +03:00
ievgenii vdovenko
b4aecb1e0b
poc: adds AI user to the system, adds migration, changes AI settings to have switch enable\disable AI features
2025-09-01 12:51:26 +02:00
Andrii Verbytskyi
58fce87f39
Merge pull request !2778 from rhodecode-enterprise-ce feature/RCCE-205user-that-owns-closed-PRs-cannot-be-deleted-as-PRs-cannot-be-deleted-or-unclosed
...
Changes from branch: Feature/RCCE 205user that owns closed PRs cannot be deleted as PRs cannot be deleted or unclosed
2025-08-01 09:30:32 +00:00
RhodeCode Admin
947fd47e2e
fix: specify default ssh port for clone urls
2025-07-31 16:19:48 +02:00
ievgenii vdovenko
2c3304132a
feature: minor refactoring
2025-07-26 15:18:08 +02:00
ievgenii vdovenko
1db5e92ca3
tests: adds test for auth ghost user; refactors accessing default/ghost user
2025-07-26 15:08:32 +02:00
ievgenii vdovenko
1c3d177833
feature: names fixes
2025-07-25 15:43:29 +02:00
ievgenii vdovenko
2dcb9984c7
feature: implemented deleting user and migrating all user assets new system ghost user
2025-07-25 15:43:29 +02:00
Andrii Verbytskyi
33459d44be
Merge pull request !2761 from rhodecode-enterprise-ce feature/RCCE-217-checkbox-to-close-delete-source-branch-when-merging-PR
...
Changes from branch: Feature/RCCE 217 checkbox to close delete source branch when merging PR
2025-07-03 12:17:29 +00:00
ievgenii vdovenko
034a34da3f
feature: fixes PullRequest DB model object
2025-06-25 12:44:35 +02:00
ievgenii vdovenko
c0ccce7e10
feature: implements frontend saving PR setting
2025-06-24 16:48:31 +02:00
ievgenii vdovenko
b42333562d
feature: adds DB model and global settings inheritance
2025-06-24 16:35:27 +02:00
ievgenii vdovenko
0471ee8ec4
feature: adds 'archived' field to internal api response
2025-06-18 16:48:54 +02:00
RhodeCode Admin
166db21812
core: run ruff format
2025-01-13 17:47:37 +01:00
RhodeCode Admin
d7e732ede3
core: support req-id tracking
2024-12-30 17:07:53 +01:00
RhodeCode Admin
107b31a78f
core: use consistent import for get_current_request
2024-12-10 07:36:38 +01:00
RhodeCode Admin
31ff8f7384
fix(db-calls): fixed issues with caches calculations when passed search fields were empty
2024-11-27 13:10:42 +01:00
RhodeCode Admin
82f0f8d214
core: updated copyright to 2024
2024-11-12 16:39:07 +01:00
RhodeCode Admin
47a4437420
fix(sqlalchemy): fixed deprecated methods for sqlalchemy
2024-10-22 22:15:46 +02:00
RhodeCode Admin
90a1d3ca75
feat(artifacts): new artifact storage engines allowing an s3 based uploads
2024-08-28 23:56:59 +02:00
RhodeCode Admin
7b14663e2c
feat(caches): make sure commit-caches propagate to parent repo groups
2024-07-29 18:02:15 +02:00
RhodeCode Admin
53e0af18ff
fix: escaper, use h.escape instead of html_escape since it's faster and correct
2024-07-17 10:16:28 +02:00
RhodeCode Admin
47e6265c09
chore(cleanups): use single consistent escape for descriptions
2024-07-16 21:53:36 +02:00
RhodeCode Admin
e013e4ca46
fix(scheduler): fixed scheduler task UID conflicts due to orjson not understanding JSONRAW and also bad sorting usage
...
fixes RCCE-92
2024-06-23 21:45:34 +02:00
Serhii Ilin
59e99e4368
feat(branch removal trough UI): Added ability to remove branches trough UI from git and hg repositories. Fixes: RCCE-75
2024-06-07 12:28:04 +03:00
Serhii Ilin
f0066be1ff
fix(forced 2fa): fixed forced 2fa functionality. Fixes: RCCE-68
2024-05-16 16:01:22 +03:00
Serhii Ilin
d069311e52
feat(2fa): added 2fa for more auth plugins and moved 2fa forced functionality to ee edition. Fixes: RCCE-68
2024-05-13 16:24:31 +03:00
RhodeCode Admin
45e456bdf0
fix(2fa): fixed various typos
2024-04-25 10:58:47 +02:00
RhodeCode Admin
6b466e15b1
fix(encryption): rely on default config based strict mode if not explicitly given into function params
2024-04-25 10:56:23 +02:00
RhodeCode Admin
922adcf2e7
chore(2fa): refactor some attributes for users
2024-04-24 18:06:20 +02:00
RhodeCode Admin
aad99df521
feat(2fa): updated and UI fixes
...
- configure 2fa
- setup 2fa
- various small improvements
2024-04-24 15:22:16 +02:00
RhodeCode Admin
337031c7a4
feat(2fa): refactor logic arround validation/recoverycodes and workflows of configuration of 2fa
...
- recovery codes are shown in 1 place only
- save status about view of recovery codes
- made the logic of saving states into user_data more explicit and no longer relly on hacky DB transaction logic
- turn JS forms into a regular forms
2024-04-24 09:45:36 +02:00
RhodeCode Admin
2fcf5e8c05
fix(gists): fixed old way of querying for gist store
2024-04-23 15:26:01 +02:00
RhodeCode Admin
cd9fe75554
fix(caching): fixed problems with Cache query for users.
...
The old way of querying caused the user get query to be always cached, and returning old results even in 2fa forms.
The new limited query doesn't cache the user object resolving issues
2024-04-23 15:25:21 +02:00
Serhii Ilin
9678665ecd
feat(2fa): Added 2fa option. Fixes: RCCE-65
2024-04-15 12:13:03 +03:00
Serhii Ilin
d8281bb5c0
feat(login by email option): added ability to log in with user primary email. Fixes: RCCE-63
2024-03-14 11:18:07 +02:00
Serhii Ilin
7e2e69d2ba
feat(repo_path-config): moved main storage location path into ini file. Fixes: RCCE-61
2024-03-01 09:39:14 +02:00