delta/gitlab/gitlab-ce.git/config/initializers/doorkeeper.rb, branch document-lambda-deploy

Merge branch 'security-fix-uri-xss-applications' into 'master'

2018-11-29T00:14:15+00:00

[master] Resolve "Reflected XSS in OAuth Authorize window due to redirect_uri allowing arbitrary protocols"

See merge request gitlab/gitlabhq!2572

Enabling Doorkeeper reuse_access_token option

2018-06-29T09:40:41+00:00

Fix OAuth application authorization screen to appear with every access

2018-06-29T08:15:42+00:00

Define custom base controller for Doorkeeper

2018-04-30T09:40:51+00:00

Since we only need the `can?` view helpers there, it's better to
include those in a separate controller.

If we inherit from `ApplicationController` we also need to deal with
authentication, that needs to be done in some, but not all doorkeeper controllers.

Specify base controller for Doorkeeper

2018-02-28T11:05:19+00:00

This will make sure the `ApplicantionController#can?` method is
available for views rendering menus based on the current user's abilities.

Clean up read_registry scope changes

2017-09-18T12:39:01+00:00

Closes #37789

Backport gitlab-ee!2456

2017-07-27T16:09:46+00:00

#20628 Enable implicit flow in Gitlab as OAuth Provider

2017-07-07T14:54:48+00:00

Closes #20628 by re-enabling implicit grant in Doorkeeper config. OAuth2 documentation refactored.

Add specs for Doorkeeper resource_owner_authenticator

2017-03-07T14:08:15+00:00

Implement OpenID Connect identity provider

2017-03-07T13:54:35+00:00