delta/gitlab/gitlab-ce.git/app/controllers/passwords_controller.rb, branch remove-commit-tree

Allow logged in user to change his password

2018-01-01T00:59:07+00:00

Users were unable to change their password through the "Reset password"
link that was sent to their email if they were logged in. This is due to
a default controller filter from Devise that requires the user to not be
logged in in order to use this link.

Allow password authentication to be disabled entirely

2017-11-23T13:16:14+00:00

Rollsback changes made to signing_enabled.

2017-09-01T09:51:40+00:00

Fixes needed when GitLab sign-in is not enabled

2017-07-13T14:08:27+00:00

When sign-in is disabled:
 - skip password expiration checks
 - prevent password reset requests
 - don’t show Password tab in User Settings
 - don’t allow login with username/password for Git over HTTP requests
 - render 404 on requests to Profiles::PasswordsController

Allow the initial admin to set a password

2016-03-04T22:37:57+00:00

Closes #1980

Use devise paranoid mode and ensure the same message is returned every time

2015-12-10T00:40:37+00:00

Skipped CI because it has already passed. Had to rebase due to CHANGELOG.

Refactor PasswordsController to use before_actions

2015-10-02T01:47:27+00:00

Only allow password reset emails once per minute

2015-09-30T19:38:21+00:00

Addresses internal https://dev.gitlab.org/gitlab/gitlabhq/issues/2611

Take advantage of `Devise.sign_in_after_reset_password`

2015-09-30T18:35:00+00:00

Use User#two_factor_enabled instead of otp_required_for_login

2015-06-19T19:14:37+00:00