summaryrefslogtreecommitdiff
path: root/config/initializers/devise.rb
Commit message (Collapse)AuthorAgeFilesLines
* Moved o_auth/saml/ldap modules under gitlab/authHoratiu Eugen Vlad2018-02-281-7/+7
|
* Adds Rubocop rule for line break around conditionals🙈 jacopo beschi 🙉2018-01-111-0/+1
|
* Adds Rubocop rule for line break after guard clauseJacopo2017-11-161-0/+1
| | | | Adds a rubocop rule (with autocorrect) to ensure line break after guard clauses.
* Change Sign Out route from a DELETE to a GETJoe Marty2017-11-061-1/+1
| | | | Closes #39708
* Merge branch 'master' into ↵Douwe Maan2017-10-051-1/+1
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | digitalmoksha/gitlab-ce-feature/verify_secondary_emails # Conflicts: # app/controllers/admin/users_controller.rb # app/controllers/confirmations_controller.rb # app/controllers/profiles/emails_controller.rb # app/models/user.rb # app/services/emails/base_service.rb # app/services/emails/destroy_service.rb # app/views/devise/mailer/confirmation_instructions.html.haml # lib/api/users.rb # spec/services/emails/destroy_service_spec.rb
| * Add `:email_confirmation` to devise `insensitive_keys`robdel122017-09-301-1/+1
| | | | | | | | | | | | | | This fixes a bug where the email confirmation input value is case sensative. For example, if the email input is `myemail@example.com` and the email confirmation input is `Myemail@example.com` the form would fail to submit.
* | must now set the devise default scope (since we now have an :email scope)Brett Walker2017-09-241-1/+1
|/ | | | and rubocop fixes
* Remove GitLab custom fealure app for deviseValery Sizov2017-07-271-6/+6
|
* Enable Style/SpaceInsideBracketsDouwe Maan2017-02-231-4/+4
|
* Added support for Authentiq Back-Channel LogoutAlexandros Keramidas2017-02-201-0/+11
|
* Merge branch 'fix-shibboleth-auth-with-no-uid' into 'master' Rémy Coutable2016-11-161-0/+4
|\ | | | | | | | | | | | | fix shibboleth misconfigurations resulting in authentication bypass This merge request fixes #22267 where a misconfigured Shibboleth `HTTP_UID` or `HTTP_EPPN` could result in users being logged into an account that did not belong to them. See merge request !7428
| * fix shibboleth misconfigurations resulting in authentication bypassfix-shibboleth-auth-with-no-uidBrian Neel2016-11-141-0/+4
| |
* | Centralize LDAP config/filter logicDrew Blessing2016-11-111-16/+3
|/ | | | | | | | | Centralize all LDAP config logic in `GitLab::LDAP::Config`. Previously, some logic was in the Devise initializer and it was not honoring the `user_filter`. If a user outside the configured `user_filter` signed in, an account would be created but they would then be denied access. Now that logic is centralized, the filter is honored and users outside the filter are never created.
* Update to send changed password notification emailsTom Bell2016-08-051-0/+3
| | | | | Add the devise initializer config setting to enable the sending of notification emails when a user changes their password.
* Enable Style/SpaceAfterComma Rubocop coprubocop/enable-space-after-copsGrzegorz Bizon2016-06-291-1/+1
|
* Codestyle: make sure we have space around operatorsGabriel Mazetto2016-05-131-1/+1
|
* Use a custom Devise failure app to handle unauthenticated .zip requestsrs-issue-12944Robert Speicher2016-03-081-5/+5
| | | | Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/12944
* Merge branch 'add_email_unlock' into 'master' Robert Speicher2015-12-211-2/+2
|\ | | | | | | | | | | | | | | | | | | | | Allow account unlock via email We see a lot of users get confused about what it means when your account gets locked. Many try to reset their password and are still faced with a lockout. With this change, users receive an email that allows them to unlock their account immediately. The previous behavior where the account is auto-unlocked after a time also still works. See merge request !2049
| * Allow account unlock via emailDrew Blessing2015-12-141-2/+2
| |
* | add CAS authentication supporttduehr2015-12-141-0/+10
|/
* Use devise paranoid mode and ensure the same message is returned every timeDrew Blessing2015-12-091-1/+1
| | | | Skipped CI because it has already passed. Had to rebase due to CHANGELOG.
* Take advantage of `Devise.sign_in_after_reset_password`rs-disable-signin-after-resetRobert Speicher2015-09-301-0/+4
|
* Crowd integrationValery Sizov2015-09-021-1/+1
|
* Add support for backup codesDmitriy Zaporozhets2015-05-091-0/+1
|
* Fix rubocop complainDmitriy Zaporozhets2015-05-091-1/+1
|
* Init 2 factor authentication for user modelDmitriy Zaporozhets2015-05-091-0/+4
|
* Make Reply-To config apply to change e-mail confirmation and other notificationsStan Hu2015-05-011-6/+1
| | | | | | | | sent through Devise Fix test case that was passing due to a broken `around` statement. Closes #1556
* Use `\A` and `\z` in regexes instead of `^` and `$`.Douwe Maan2015-04-101-1/+1
|
* Increase password reset timeout since other people trigger it when they ↵Sytse Sijbrandij2015-01-231-1/+2
| | | | create an account for you.
* Only enable LDAP providers if LDAP is enabledJan-Willem van der Meer2014-10-151-1/+1
|
* Use Hash syntax for LDAP server declarationJan-Willem van der Meer2014-10-141-2/+2
|
* Apply configuration changes for Multiple LDAP serversJan-Willem van der Meer2014-10-131-14/+16
|
* Try to keep token authenticable compatibilityMarin Jankovski2014-07-091-4/+0
|
* Revert "Actually use the 'user_filter' configuration option"Jacob Vosmaer2014-05-271-2/+1
| | | | | | | | | | | | | | | This reverts commit e9d4587ff11c8510f01dfa184414f73d75b4550b, which is incompatible with GitLab's built in LDAP user filter: a GitLab LDAP filter is [added on top of the other filters used to find the user](https://gitlab.com/gitlab-org/gitlab-ce/blob/982d4d51e8110bec280eb00db0fb756b062103d9/lib/gitlab/ldap/adapter.rb#L61) Example GitLab LDAP filter: `(memberOf=cn=foo,dc=bar)`. In contrast, an omniauth-ldap filter [replaces the 'normal' filters](https://gitlab.com/gitlab-org/omniauth-ldap/blob/76d77543dec0c585bb4e974262f43675f9810953/lib/omniauth/strategies/ldap.rb#L55) Example omniauth-ldap user filter: `(&(uid=%{username})(memberOf=cn=foo,dc=bar))`.
* Actually use the 'user_filter' configuration optionTravis Odom2014-04-211-1/+2
|
* Send emails from the authorPierre de La Morinerie2014-02-191-1/+1
| | | | | | | | | | | | This changes the email "From" field from "gitlab@example.com" to either: * "John Doe <gitlab@example.com>" if the author of the action is known, * "GitLab <gitlab@example.com>" otherwise. Rationale: this allow mails to appear as if they were sent by the author. It appears in the mailbox more like a real discussion between the sender and the receiver ("John sent: we should refactor this") and less like a robot notifying about something.
* Change Devise.confirm_within to Devise.allow_unconfirmed_access_forAthos Ribeiro2014-02-031-2/+2
| | | | | | | According to Devise's changelog (https://github.com/plataformatec/devise/blob/master/CHANGELOG.md), Devise.confirm_within was deprecated in favor of Devise.allow_unconfirmed_access_for in version 2.0.0.
* refactor omniauth configuration methodRaffael Schmid2013-12-301-4/+10
| | | | | | This refactoring allows a user to use omniauth providers which do not use ```app_id``` and ```app_secret``` without needing to change the devise configuration.
* Migrate application to rails 4 step 1Dmitriy Zaporozhets2013-12-101-0/+1
| | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
* We welcome everyone to contribute.Sytse Sijbrandij2013-12-011-2/+2
|
* Minimal password length increasedDmitriy Zaporozhets2013-11-251-1/+1
| | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
* Enable confirmable and reconfirmable modules for UserDmitriy Zaporozhets2013-10-151-0/+2
| | | | | | | | | Now when you want to signup or change existing email you will be forced to confirm that you really own this email. You get email with link to follow in order to confirm your email address Conflicts: app/models/user.rb
* Update the proc/lamda to be consistentIzaak Alpert2013-07-181-3/+3
| | | | Change-Id: I411c7544c7834b00d26e51dc9a6c0396c51bd4f3
* Allow the ldap logins with email or usernameIzaak Alpert2013-07-181-1/+8
| | | | Change-Id: I73b4aa4c46afd56ae02fb24abcd673c0724547e4
* Replace old hashes with new 1.9 ruby hashes (rebase)Andrey Kumanyaev2013-05-051-9/+9
|
* login with both email or usernameDmitriy Zaporozhets2013-03-251-1/+1
|
* update devise gemDmitriy Zaporozhets2013-02-281-1/+1
|
* Allow the OmniAuth provider args parameter to pass through as either an ↵Aaron Stone2012-12-231-1/+10
| | | | Array or a Hash.
* Fix gravatar and ldap configRiyad Preukschas2012-12-201-12/+10
|
* Update uses of Gitolite.config.foo settingsRiyad Preukschas2012-12-201-1/+1
|
View Lorry Controller Status