delta/gitlab/gitlab-ce.git/spec/controllers/omniauth_callbacks_controller_spec.rb, branch app-differences

Revert Rails.application.env_config after using mock_auth_hash

2019-04-23T19:11:08+00:00

Signed-off-by: Rémy Coutable

Add some frozen string to spec/**/*.rb

2019-04-15T10:17:05+00:00

Adds frozen string to the following:

* spec/bin/**/*.rb
* spec/config/**/*.rb
* spec/controllers/**/*.rb

xref https://gitlab.com/gitlab-org/gitlab-ce/issues/59758

Autocorrect with RSpec/ExampleWording cop

2019-04-05T08:43:27+00:00

- rewords examples starting with 'should'
- rewords examples starting with 'it'

Note: I had to manually fixup "onlies" to "only"

Move out link\unlink ability checks to a policy

2019-03-19T12:38:16+00:00

We can extend the policy in EE for additional behavior

Merge branch 'ce-security-jej/group-saml-link-origin-verification' into 'master'

2019-03-04T18:36:26+00:00

Ensure request to link GroupSAML acount was GitLab initiated

See merge request gitlab/gitlabhq!2976

Avoid CSRF check on SAML failure endpoint

2019-02-04T10:10:51+00:00

SAML and OAuth failures should cause a message to be presented, as well
as logging that an attempt was made. These were incorrectly prevented by
the CSRF check on POST endpoints such as SAML.

In addition we were using a NullSession forgery protection, which made
testing more difficult and could have allowed account linking to take
place if a CSRF was ever needed but not present.

Backport EE GroupSAML origin verification changes

2019-01-23T19:42:16+00:00

Update gitlab-styles to 2.5.1

2019-01-11T22:59:35+00:00

Preserve URL fragment across sign-in and sign-up redirects

2019-01-10T06:00:38+00:00

If window.location contains a URL fragment, append the fragment to all sign-in forms, the sign-up form, and all button based providers.

Whitelist existing destroy_all offenses

2018-08-16T15:29:37+00:00

This whitelists all existing places where we use "destroy_all".