summaryrefslogtreecommitdiff
path: root/app/controllers/application_controller.rb
Commit message (Collapse)AuthorAgeFilesLines
* Merge branch 'mr-widget-redesign-review' into 'master'Jacob Schatz2017-05-091-1/+4
| | | | | | | | Merge request widget redesign Closes #25424 and #27950 See merge request !10319
* Redirect from redirect routes to canonical routesMichael Kozono2017-05-051-1/+1
|
* More updates for translations plus some refactoring.Ruben Davila2017-05-031-9/+5
|
* First round of updates from the code review.Ruben Davila2017-05-021-4/+11
|
* Merge branch 'master' into 28433-internationalise-cycle-analytics-pageRuben Davila2017-05-021-0/+4
|\
| * Resolve "Add more tests for spec/controllers/projects/builds_controller_spec.rb"Dosuken shinya2017-04-281-0/+4
| |
* | Fix Rubocop complains plus some small refactorRuben Davila2017-04-191-0/+1
| |
* | Set locale through controller filterRuben Davila2017-04-131-0/+6
|/
* Extract 2FA-related code from ApplicationControllerMarkus Koller2017-04-061-39/+1
|
* Support 2FA requirement per-groupMarkus Koller2017-04-061-2/+10
|
* Move AuthHelper#two_factor_skippable? into ApplicationControllerMarkus Koller2017-04-061-0/+7
|
* Don't try to find a user by personal_access_token if the token is nilRémy Coutable2017-03-221-2/+5
| | | | Signed-off-by: Rémy Coutable <remy@rymai.me>
* use the policy stack to protect loginshttp://jneen.net/2017-03-091-1/+1
|
* use a magic default :global symbol instead of nilhttp://jneen.net/2017-03-091-1/+1
| | | | to make sure we mean the global permissions
* Make Warden set_user hook validate user ip uniqunessPawel Chojnacki2017-03-061-1/+1
| | | | + rename shared context
* Remove unecessary calls to limit_user!, UniqueIps Middleware, and address MR ↵Pawel Chojnacki2017-03-061-0/+4
| | | | | | | | | | review - cleanup formating in haml - clarify time window is in seconds - cleanup straneous chunks in db/schema - rename count_uniqe_ips to update_and_return_ips_count - other
* Stop setting Strict-Transport-Securty header from within the appPaweł Chojnacki2017-03-031-4/+0
|
* Fix the redirect to custom home page URL and move it to RootController28609-fix-redirect-to-home-page-urlRémy Coutable2017-02-271-21/+0
| | | | Signed-off-by: Rémy Coutable <remy@rymai.me>
* Enable Performance/RedundantBlockCallDouwe Maan2017-02-231-1/+1
|
* No more and/orDouwe Maan2017-02-211-4/+4
|
* Don't perform Devise trackable updates on blocked User recordsrs-warden-blocked-usersRobert Speicher2017-02-101-16/+1
|
* Rename Gogs to Gitea, DRY the controller and improve viewsRémy Coutable2016-12-191-3/+3
| | | | Signed-off-by: Rémy Coutable <remy@rymai.me>
* Gogs ImporterKim "BKC" Carlbäcker2016-12-191-1/+5
|
* Merge branch 'master' of gitlab.com:gitlab-org/gitlab-ce into bitbucket-oauth2Valery Sizov2016-11-301-1/+9
|\
| * Merge branch 'dz-allow-nested-group-routing' into 'master' Douwe Maan2016-11-241-0/+8
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add nested groups support to the routing ## What does this MR do? It allows routing with `/` in namespace name ## Why was this MR needed? For nested groups feature(https://gitlab.com/gitlab-org/gitlab-ce/issues/2772). We need URI like `/group/subgroup/project` be routed correctly ## Does this MR meet the acceptance criteria? - [x] [Changelog entry](https://docs.gitlab.com/ce/development/changelog.html) added - ~~[Documentation created/updated](https://gitlab.com/gitlab-org/gitlab-ce/blob/master/doc/development/doc_styleguide.md)~~ - ~~API support added~~ - Tests - [x] Added for this feature/bug - [x] All builds are passing - [x] Conform by the [merge request performance guides](http://docs.gitlab.com/ce/development/merge_request_performance_guidelines.html) - [x] Conform by the [style guides](https://gitlab.com/gitlab-org/gitlab-ce/blob/master/CONTRIBUTING.md#style-guides) - [x] Branch has no merge conflicts with `master` (if it does - rebase it please) - [x] [Squashed related commits together](https://git-scm.com/book/en/Git-Tools-Rewriting-History#Squashing-Commits) ## What are the relevant issue numbers? https://gitlab.com/gitlab-org/gitlab-ce/issues/2772 See merge request !7459
| | * Add nested groups support to the routingdz-allow-nested-group-routingDmitriy Zaporozhets2016-11-231-0/+8
| | | | | | | | | | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
| * | Allow admins to stop impersonating users without e-mail addressesOren Kanner2016-11-171-1/+1
| |/ | | | | | | | | | | | | | | Resolves #24576 Modify the guard clause of the `ApplicationController#require_email` before action to skip requests where an admin is impersonating the current user.
* | Remove code to clone Bitbucket repositories using SSHDouglas Barbosa Alexandre2016-11-211-1/+1
|/
* Pass `@ref` along so we know which pipeline to showLin Jen-Shin2016-10-241-1/+2
| | | | Closes #23615
* Merge branch 'master' into merge-conflicts-editor-2Sean McGivern2016-10-171-0/+4
|\
| * Handle unmatched routing with not_found methodDmitriy Zaporozhets2016-10-151-0/+4
| | | | | | | | | | | | | | We need this to prevent routing error when user access URL like /123 when there is no resource located under such name Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
* | Fix specsSean McGivern2016-10-131-2/+2
| |
* | Allow setting content for resolutionsSean McGivern2016-10-131-1/+6
|/ | | | | | | | | | | | | | | | | | | | | | | | When reading conflicts: 1. Add a `type` field. `text` works as before, and has `sections`; `text-editor` is a file with ambiguous conflict markers that can only be resolved in an editor. 2. Add a `content_path` field pointing to a JSON representation of the file's content for a single file. 3. Hitting `content_path` returns a similar datastructure to the `file`, but without the `content_path` and `sections` fields, and with a `content` field containing the full contents of the file (with conflict markers). When writing conflicts: 1. Instead of `sections` being at the top level, they are now in a `files` array. This matches the read format better. 2. The `files` array contains file hashes, each of which must contain: a. `new_path` b. `old_path` c. EITHER `sections` (which works as before) or `content` (with the full content of the resolved file).
* Fix inconsistent highlighting of already selected activity nav-linksClement Ho2016-10-051-1/+2
|
* remove Ability.abilitieshttp://jneen.net/2016-08-301-6/+2
|
* Remove gitoriouszj-remove-gitoriousZ.J. van de Weg2016-08-251-5/+1
|
* Add Sentry logging to API callsadd-sentry-logging-to-apiStan Hu2016-08-241-22/+1
| | | | Closes #21043
* State specific default sort order for issuableszs2016-08-011-56/+0
| | | | | | | | | | | | | | | Provide more sensible default sort order for issues and merge requests based on the following table: | type | state | default sort order | |----------------|--------|--------------------| | issues | open | last created | | issues | closed | last updated | | issues | all | last created | | merge requests | open | last created | | merge requests | merged | last updated | | merge requests | closed | last updated | | merge requests | all | last created |
* Load Javascript U2F library selectively.Timothy Andrew2016-07-141-4/+0
| | | | | | | | | | 1. Only on supported Chrome versions 2. Mainly, this lets us simplify the javascript-based U2F check to `window.u2f`, where `window.u2f` can either be loaded from the GitLab server (for Chrome) or from the Firefox extension. 3. This is a better way to provide browser detection for U2F.
* Raise a new Gitlab::Access::AccessDeniedError when permission is not enough ↵Rémy Coutable2016-06-181-0/+4
| | | | | | | | to destroy a member This is a try for a new approach to put the access checks at the service level. Signed-off-by: Rémy Coutable <remy@rymai.me>
* Merge branch 'feature/project-export' into 'master' Douwe Maan2016-06-171-1/+5
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Export project functionality This is a MR for the export functionality of https://gitlab.com/gitlab-org/gitlab-ce/issues/3050, which adds the ability to export single projects. - [x] members - DB data - [x] issues - [x] issue comments - [x] merge requests - [x] merge request diff - [x] merge request comments - [x] labels - [x] milestones - [x] snippets - [x] releases - [x] events - [x] commit statuses - [x] CI builds - File system data - [x] Git repository - [x] wiki - [x] uploads - [ ] ~~CI build traces~~ - [ ] ~~CI build artifacts~~ - [ ] ~~LFS objects~~ - DB configuration - [x] services - [x] web hooks - [x] protected branches - [x] deploy keys - [x] CI variables - [x] CI triggers See merge request !3114
| * Merge branches 'feature/project-export-ui-experimental' and ↵James Lopez2016-06-131-5/+17
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 'feature/project-import' of gitlab.com:gitlab-org/gitlab-ce into feature/project-export-ui-experimental # Conflicts: # Gemfile.lock # app/helpers/todos_helper.rb # app/models/todo.rb # app/views/projects/edit.html.haml # lib/gitlab/import_export/import_service.rb
| * \ Merge branch 'feature/project-import' of gitlab.com:gitlab-org/gitlab-ce ↵James Lopez2016-05-091-1/+1
| |\ \ | | | | | | | | | | | | into feature/project-export-ui-experimental
| * | | gitlab import UI - icon, file selector, etc... Also updated font-awesome and ↵James Lopez2016-04-221-1/+5
| | | | | | | | | | | | | | | | modified import source settings.
* | | | Implement @DouweM's feedback.Timothy Andrew2016-06-161-16/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Extract a duplicated `redirect_to` - Fix a typo: "token", not "certificate" - Have the "Expires at" datepicker be attached to a text field, not inline - Have both private tokens and personal access tokens verified in a single "authenticate_from_private_token" method, both in the application and API. Move relevant logic to `User#find_by_personal_access_token` - Remove unnecessary constants relating to API auth. We don't need a separate constant for personal access tokens since the param is the same as for private tokens.
* | | | Merge remote-tracking branch 'origin/master' into 2979-personal-access-tokensTimothy Andrew2016-06-141-0/+1
|\ \ \ \ | | |_|/ | |/| |
| * | | Add workhorse controller and API helpersDouwe Maan2016-06-061-0/+1
| | | |
* | | | Merge remote-tracking branch 'origin/master' into 2979-personal-access-tokensTimothy Andrew2016-06-091-2/+13
|\ \ \ \ | |/ / /
| * | | Implement U2F registration.Timothy Andrew2016-06-061-0/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Move the `TwoFactorAuthsController`'s `new` action to `show`, since the page is not used to create a single "two factor auth" anymore. We can have a single 2FA authenticator app, along with any number of U2F devices, in any combination, so the page will be accessed after the first "two factor auth" is created. - Add the `u2f` javascript library, which provides an API to the browser's U2F implementation. - Add tests for the JS components
| * | | Add a `U2fRegistrations` table/model.Timothy Andrew2016-06-061-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - To hold registrations from U2F devices, and to authenticate them. - Previously, `User#two_factor_enabled` was aliased to the `otp_required_for_login` column on `users`. - This commit changes things a bit: - `User#two_factor_enabled` is not a method anymore - `User#two_factor_enabled?` checks both the `otp_required_for_login` column, as well as `U2fRegistration`s - Change all instances of `User#two_factor_enabled` to `User#two_factor_enabled?` - Add the `u2f` gem, and implement registration/authentication at the model level.