engineering/unrhodecode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2655 commits 1 branch 0 tags 110 MiB
Commit graph

90 commits

Author SHA1 Message Date
Marcin Kuzminski
a8428e7271 auth-ldap: added connection pinning and timeout option to ldap plugin 2018-03-27 11:51:37 +02:00
Marcin Kuzminski
6847122bc5 cli: skip auth plugin search/registry in case of cli invocation for faster execution of those actions. 
- we don't need to load plugins for CLI calls
 2018-03-01 16:46:49 +01:00
Marcin Kuzminski
46ce151bf7 setup: catch and don't stop on any exception in fetching the legacy plugins. 2018-03-01 13:13:19 +01:00
Marcin Kuzminski
ff0e89625a logging: improve auth log chain for easier debugging. 2018-02-28 14:16:15 +01:00
Marcin Lulek
bb9a4574cb auth: fix regression on cache manage namespace generation in case of external plugins a new users. 2018-02-21 10:39:13 +01:00
Marcin Kuzminski
d06a62c340 logging: improve consistency of auth plugins logs. 2018-02-19 14:49:21 +01:00
Marcin Kuzminski
0cbdfc3f23 ldap: enable connection recycling on LDAP plugin. 2018-02-16 10:57:29 +01:00
Marcin Kuzminski
ba5aec079a caches: use individual namespaces per user to prevent beaker caching problems. 
- especially for mysql in case large number of data in caches there could be critical errors storing cache, and thus preventing
users from authentication. This is caused by the fact that we used single namespace for ALL users. It means it grew as number of users grew
reaching mysql single column limit.
This changes the behaviour and now we use namespace per-user it means that each user-id will have it's own cache namespace fragmenting maximum column data to
a single user cache. Which we should never reach.
 2018-02-15 17:34:09 +01:00
Marcin Kuzminski
90120e6678 authentication: introduce a group sync flag for plugins. 
- we'll skip any syncing on plugins which simply don't get any group information
- we let plugins define if they wish to sync groups
- prevent from odd cases in which someone sets user groups as syncing, and using regular
plugin. In this case memebership of that group would be wiped, and it's generaly bad behaviour.
 2018-01-24 16:47:06 +01:00
Marcin Kuzminski
00b45c1fa7 release: update copyright year to 2018 2018-01-19 17:13:16 +01:00
Marcin Kuzminski
79f00ec46a flash: use consistent use of h.flash across the application. 2017-11-16 20:35:50 +01:00
Marcin Kuzminski
5f9ae2ae11 pylons: remove pylons as dependency 
- dependencies: bumped:
 -setuptools-scm==1.15.6
 -celery==4.1.0
 -kombu==4.1.0
 -pytz==2017.3
 -Routes==2.4.1

Removed all pylons components. Refactored the code to use only pyramid
parts
 2017-11-15 13:42:54 +01:00
Marcin Kuzminski
d4c5944577 release: merge back stable branch into default 2017-11-11 22:09:42 +01:00
Marcin Kuzminski
7a512a4788 ldap: fixed regression in extracting settings after library updates. 
- somehow we now got '' defaulted to None which changed the behaviour.
 2017-11-11 16:43:45 +01:00
Marcin Kuzminski
7de15715e0 ldap: increase timeouts and timelimits for operations 2017-11-11 10:29:31 +01:00
Marcin Kuzminski
116099638b apps: switch import of ADMIN_PREFIX from routing into base app. 
- routing is deprecated and will be soon removed
 2017-11-07 14:17:26 +01:00
Marcin Kuzminski
27697682bc auth: don't cache settings for auth plugins 2017-10-13 10:54:52 +02:00
Marcin Kuzminski
3d0069b5f4 caches: clear perms cache manager while updating settings for auth plugins 2017-10-12 22:38:04 +02:00
Marcin Kuzminski
7781eabe94 auth: use cache_ttl from a plugin to also cache permissions. 
- this gives a 30% speed increase in operations like svn commit
- generally uses the same mechanismy like auth cache to cache permissions for faster
access to vcs commands
 2017-10-07 10:02:39 +02:00
Marcin Kuzminski
34175fd787 auth-rhodecode: don't fail on bcrypt if user password is set to None. 
Default to emptry string to not cause an exception.
 2017-10-07 10:02:57 +02:00
Marcin Kuzminski
78dae50c63 auth: add more login when performing sync of user groups. 2017-09-29 21:36:23 +02:00
Marcin Kuzminski
f445addfdd vcs: reduce sql queries used during pull/push operations. 2017-09-28 21:45:19 +02:00
Marcin Kuzminski
c81494c245 auth: remove usage of pylons translator 2017-09-19 12:41:53 +02:00
Marcin Kuzminski
ee0e7c21f8 users: make AuthUser propert a method, and allow override of params. 2017-08-03 20:17:46 +02:00
Marcin Kuzminski
93908a0f84 auth: use our own simpler hybrid property. 
- we shouldn't relly on sqlalchemy internal method, it has a different purpose.
 2017-07-26 09:54:50 +02:00
Marcin Kuzminski
c03f634951 auth-ldap: improve messages when users failed to authenticate. Fixes #5345 2017-06-30 15:09:12 +02:00
Marcin Kuzminski
587e36d745 auth-plugins: updated description on auth_ldap plugin servers. 2017-06-01 12:46:15 +02:00
Marcin Kuzminski
8890b4a0da ldap: addedn info about custom certificates option 2017-05-12 11:05:39 +02:00
Marcin Kuzminski
5fc5ee4d35 auth-plugins: define unsafe settings 2017-04-10 17:16:17 +02:00
Marcin Kuzminski
8417882de5 auth-plugins: add mechanismy to remove secrets from plugin logs. 
- it's not recommended to log things like ldap access passwords or
other credentials.
-  we expose a machanismy for each plugin to define a unsafe keys to be
removed.
 2017-04-10 17:14:07 +02:00
Marcin Kuzminski
662dda4aa7 auth-plugins: remove dead code 2017-04-10 17:13:09 +02:00
Marcin Kuzminski
8732733a54 authentication: enabled authentication with auth_token and repository scope. 
- fixes #3932
- vcs type tokens now with repo scope narrows the usage to a repository.
 2017-03-03 20:48:23 +01:00
Marcin Kuzminski
94cd7b2237 authentication: add some more logging when extracting users. 2017-03-03 20:11:35 +01:00
Marcin Kuzminski
8ceda76718 auth: refactor code and simplified instructions. 
- added new rfc selector
- cleanup imports
 2017-02-21 18:05:29 +01:00
Marcin Kuzminski
5c2c266ee9 auth-tokens: updated logic of authentication to a common shared user method. 2017-02-13 14:36:48 +01:00
Marcin Kuzminski
89e2586781 templating: use .mako as extensions for template files. 2017-01-04 22:13:57 +01:00
Marcin Kuzminski
fcc027c282 license: updated copyright year to 2017 2017-01-02 09:30:39 +01:00
Marcin Kuzminski
3aab8af9e2 authentication-views: fixed old style exception catch syntax. 2016-11-07 15:01:27 +01:00
Martin Bornhold
72819c6826 auth: Allow auth plugins to customize the slug which is used to generate URLs. #4078 2016-10-28 14:03:27 +02:00
Marcin Kuzminski
c0e4fc7dcd ldap: fixed email extraction typo. An empty 
ldap email will now not overwritt the stored one.
 2016-09-30 16:19:12 +02:00
Martin Bornhold
c46ad9f215 vcs: Pass registry to vcs for user authentication. 
Explicit pass the registry insted of indirectly using it via pyramids
thread locals.
 2016-08-08 08:29:10 +02:00
Marcin Kuzminski
708038952c db: always use Session() for compatibility, Using Session is actually the 
scoped_session which is not the same as the one which we "call".

More here: http://docs.sqlalchemy.org/en/latest/orm/contextual.html#contextual-thread-local-sessions
 2016-07-27 00:42:19 +02:00
Martin Bornhold
bee42a50ed auth: Fix renaming of 'auth_cahe_ttl' to 'cache_ttl' #4127 2016-07-27 15:54:42 +02:00
Marcin Kuzminski
d0638fa1a1 auth-ldap: added flag to set debug mode for LDAP connections. 2016-07-26 13:09:56 +02:00
Marcin Kuzminski
af6f54dbae auth-plugins: added better log message about the auth-cache-ttl settings. 2016-07-26 13:09:31 +02:00
Marcin Kuzminski
08000af552 auth: made the message about not-active user consisten with token plugin 2016-07-13 12:27:04 +02:00
Marcin Kuzminski
ab6750c9a7 auth-token: allow other authentication types to use auth-token. 
Fixes #4070
 2016-07-12 19:56:48 +02:00
Martin Bornhold
0641c0e2d0 authn: Generate the form default values manually. 
When using colander.flatten(data) it adds colander.null for each
missing form field. But this is not correct. What we want here is
a dict wich contains only the keys/values from request.params that
match a form field.
 2016-06-28 16:28:18 +02:00
Martin Bornhold
54f29c46ab authn: Only lookup settings from DB if they are really used. 
When computing the form defaults only query the DB if we
need the value from DB.
 2016-06-28 12:07:10 +02:00
Martin Bornhold
381973ba40 authn: Remove usage of colander.serialize to generate form defaults. 2016-06-28 11:56:27 +02:00