delta/gitlab/gitlab-ce.git/lib/api/session.rb, branch docs/update-create-mr

Don't display the `is_admin?` flag for user API responses.

2017-04-25T09:46:05+00:00

- To prevent an attacker from enumerating the `/users` API to get a list of all
  the admins.

- Display the `is_admin?` flag wherever we display the `private_token` - at the
  moment, there are two instances:

  - When an admin uses `sudo` to view the `/user` endpoint
  - When logging in using the `/session` endpoint

adds impersonator variable and makes sudo usage overall more clear

2016-12-07T14:42:51+00:00

Grapify the session API

2016-11-09T16:36:35+00:00

Small refactor and syntax fixes.

2016-08-18T21:47:26+00:00

Added checks for 2FA to the API `/sessions` endpoint and the Resource Owner Password Credentials flow.

2016-08-18T21:47:26+00:00

Improve Gitlab::Auth method names

2016-06-10T12:51:16+00:00

Auth.find was a very generic name for a very specific method.
Auth.find_in_gitlab_or_ldap was inaccurate in GitLab EE where it also
looks in Kerberos.

Rename finder to find_in_gitlab_or_ldap

2016-06-02T11:42:18+00:00

Use correct auth finder

2016-05-02T11:19:39+00:00

Make CI/Oauth/rate limiting reusable

2016-04-29T16:58:55+00:00

Add LDAP support to /api/session

2013-07-16T08:28:19+00:00