Commit graph

82 commits

Author SHA1 Message Date
ievgenii vdovenko
60628d4426 tests: adds tests for ldap dao 2025-08-04 11:44:34 +02:00
ievgenii vdovenko
5c64efb55f feature: removes redundant class 2025-08-04 11:44:25 +02:00
ievgenii vdovenko
7577eeb493 feature: initial implementation of LDAP/AD sync 2025-08-04 11:44:22 +02:00
ievgenii vdovenko
c4e8a9c7cc tests: adds tests for ldap dao 2025-08-04 11:43:18 +02:00
ievgenii vdovenko
736a441186 feature: removes redundant class 2025-08-04 11:43:18 +02:00
ievgenii vdovenko
b783ff6689 feature: initial implementation of LDAP/AD sync 2025-08-04 11:43:18 +02:00
ievgenii vdovenko
2dcb9984c7 feature: implemented deleting user and migrating all user assets new system ghost user 2025-07-25 15:43:29 +02:00
RhodeCode Admin
166db21812 core: run ruff format 2025-01-13 17:47:37 +01:00
RhodeCode Admin
82f0f8d214 core: updated copyright to 2024 2024-11-12 16:39:07 +01:00
Serhii Ilin
d069311e52 feat(2fa): added 2fa for more auth plugins and moved 2fa forced functionality to ee edition. Fixes: RCCE-68 2024-05-13 16:24:31 +03:00
Serhii Ilin
9678665ecd feat(2fa): Added 2fa option. Fixes: RCCE-65 2024-04-15 12:13:03 +03:00
Serhii Ilin
d8281bb5c0 feat(login by email option): added ability to log in with user primary email. Fixes: RCCE-63 2024-03-14 11:18:07 +02:00
RhodeCode Admin
c8b35a769a ldap: small fixes and improvements over ldap authentication 2023-08-21 09:40:30 +02:00
RhodeCode Admin
a6e9ccf9e0 authentication: run modernize for python3 2023-07-18 14:26:37 +02:00
RhodeCode Admin
3c7a0fe047 lint: ruff run 2023-07-18 13:46:39 +02:00
RhodeCode Admin
42301154fc copyrights: updated for 2023 2023-07-18 11:57:27 +02:00
RhodeCode Admin
2ff61d5c42 authentication: fixed for python3 migrations 2023-07-18 11:00:47 +02:00
RhodeCode Admin
d985e2f96c authentications: remove utf8 markers 2023-07-18 11:00:05 +02:00
RhodeCode Admin
34af9cfa2f python3: fixed various code issues
- iterators
- use of u''
2023-03-20 20:51:25 +01:00
RhodeCode Admin
c22758550a python3: fix urllib usage 2023-03-06 22:00:27 +01:00
RhodeCode Admin
8a95bb9eb4 logging: changed module in logs extra as it is a reserved keyword 2022-10-27 22:54:02 +02:00
RhodeCode Admin
faa449987b logging: expose extra metadata to various important logs for loki 2022-10-27 22:49:17 +02:00
Milka Kuzminski
5590b13ef5 auth: allow custom name for plugins if defined in the settings. 2020-11-03 13:25:13 +01:00
Daniel Dourvaris
0937ed89a1 auth-crawd: py3 compat 2020-05-20 10:44:04 +02:00
Marcin Kuzminski
fe96e16646 code: update copyrights to 2020 2020-04-16 00:34:52 +02:00
Marcin Kuzminski
13f313d4b5 ldap: changed plugin to help with debugging and error handling.
- mostly based from support.
2020-04-15 14:47:52 +02:00
Marcin Kuzminski
90b8007935 ldap: fixed ldaps port example to correct number. 2020-04-06 16:51:44 +02:00
Marcin Kuzminski
b7e6ccbdc0 ldap: logging fixes 2020-03-19 14:20:23 +01:00
Daniel Dourvaris
53980d49a6 authentication: allow super-admins to change bound authentication for users.
- we had many requests from admins on doing so, after connecting LDAP/Saml
- since admins actually started doing this via DB it's no longer a point we shouldn't enable it via UI
2019-10-10 14:08:11 +02:00
Marcin Kuzminski
6a6d8fa92c auth: add scope and login restrictions to rhodecode plugin, and scope restriction to token plugin.
- allows limiting the usage of builtin auth to HTTP only (so force usage of tokens)
- allows migration to something like saml keeping only super-admin for login.
2019-01-16 11:03:28 +01:00
Marcin Kuzminski
26b57aead0 authentication: introduce login restriction option for builtin rhodecode plugin. 2019-01-15 11:26:25 +01:00
Marcin Kuzminski
1ead0d3876 auth: login/registration changes for upcomming new rules for login using external identities.
- show session expiration
2019-01-15 11:34:50 +01:00
Marcin Kuzminski
bd1a9c8201 docs: updated copyrights to 2019 2019-01-02 18:13:27 +01:00
Marcin Kuzminski
cbff54d3ed docs: added SAML documentation.
- Remove few obsolete replaces
- update authentication docs
- cleanups and fixes
2018-11-30 07:37:45 +01:00
Marcin Kuzminski
d7fe00f943 auth: add better logging for ldap related attributes to help track problems 2018-12-05 19:07:17 +01:00
Marcin Kuzminski
739fc96fe7 auth-plugins: updated some code for better unicode compat. 2018-11-29 18:14:14 +01:00
Marcin Kuzminski
09013efd3b auth-plugins: some code cleanup + added docs for main plugin. 2018-11-28 13:42:28 +01:00
Marcin Kuzminski
c258d66e7b authentication: use registerd UID for plugin definition for more consistent loading of auth plugins. 2018-11-26 23:11:52 +01:00
Marcin Kuzminski
f33e0ddc9f core: change from homebrew plugin system into pyramid machinery.
- it's faster to load
- homebrew system was never used as intended
- it's cleaner CE/EE code this way
2018-11-25 11:56:29 +01:00
Marcin Kuzminski
e1bbb01dab ldap: adde common ldap-ce na ldap-ee structure, and extend options
- added timeout
- make the code more shared
- allow specification of tls certdir and certfile manually
2018-11-25 18:47:15 +01:00
Marcin Kuzminski
fc6891786b auth-plugins: updated display names of plugins, and root resource. 2018-11-21 18:51:34 +01:00
Marcin Kuzminski
3947a873c5 auth-plugins: expose docs and icon methods for authentication. 2018-11-21 18:43:26 +01:00
Marcin Kuzminski
215c7d3beb ldap: ensure the proper cert files and dirs are set.
- addresses some issues with SSL certificates after bump of the LDAP drivers.
2018-11-20 22:05:34 +01:00
Marcin Kuzminski
9033601562 logging: use lazy parameter evaluation in log calls. 2018-09-13 17:41:35 +02:00
Marcin Kuzminski
490e2c8a57 dependencies: bumped python-pam to 1.8.4 and fixed pam auth. 2018-07-31 16:56:20 +02:00
Marcin Kuzminski
213cf5463d release: merge back stable branch into default 2018-05-15 16:04:13 +02:00
Marcin Kuzminski
12d382294e ldap: use connection ping only in case of single server specifed. 2018-05-04 16:13:31 +02:00
Marcin Kuzminski
a9aca0d074 email: added help block on where to change email settings 2018-04-25 12:02:44 +02:00
Marcin Kuzminski
f7c75e1cf6 auth: use more consistent logging on failed logs.
- auth-token, auth-rhodecode uses info for OK, and warn for failed logins.
- using error logs can cause wrong expectations about failure to loging due to an error.
2018-04-09 13:31:57 +02:00
Marcin Kuzminski
a8428e7271 auth-ldap: added connection pinning and timeout option to ldap plugin 2018-03-27 11:51:37 +02:00