delta/gitlab/gitlab-ce.git - gitlab.com: gitlab-org/gitlab-ce.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	Remove Session API	Douwe Maan	2017-11-02	1	-20/+0
\|
*	Don't display the `is_admin?` flag for user API responses.	Timothy Andrew	2017-04-25	1	-2/+2
\| \| \| \| \| \| \| \| \| \| \|	- To prevent an attacker from enumerating the `/users` API to get a list of all the admins. - Display the `is_admin?` flag wherever we display the `private_token` - at the moment, there are two instances: - When an admin uses `sudo` to view the `/user` endpoint - When logging in using the `/session` endpoint
*	adds impersonator variable and makes sudo usage overall more clear24537-reenable-private-token-with-sudo	tiagonbotelho	2016-12-07	1	-2/+2
\|
*	Grapify the session APIgrapify-session-api	Robert Schilling	2016-11-09	1	-10/+9
\|
*	Small refactor and syntax fixes.2fa-api-check	Patricio Cano	2016-08-18	1	-1/+1
\|
*	Added checks for 2FA to the API `/sessions` endpoint and the Resource Owner ↵	Patricio Cano	2016-08-18	1	-0/+1
\| \| \| \|	Password Credentials flow.
*	Improve Gitlab::Auth method names	Jacob Vosmaer	2016-06-10	1	-1/+1
\| \| \| \| \| \|	Auth.find was a very generic name for a very specific method. Auth.find_in_gitlab_or_ldap was inaccurate in GitLab EE where it also looks in Kerberos.
*	Rename finder to find_in_gitlab_or_ldap	Jacob Vosmaer	2016-06-02	1	-1/+1
\|
*	Use correct auth finder	Jacob Vosmaer	2016-05-02	1	-6/+1
\|
*	Make CI/Oauth/rate limiting reusable	Jacob Vosmaer	2016-04-29	1	-2/+6
\|
*	Add LDAP support to /api/session	Dmitriy Zaporozhets	2013-07-16	1	-8/+9
\|
*	Refactor API classes. So api classes like Gitlab::Issues become API::Issues	Dmitriy Zaporozhets	2013-05-14	1	-1/+1
\|
*	API: return 401 for invalid session	Nihad Abbasov	2012-09-20	1	-3/+2
\|
*	I want be able to get token via api. Used for mobile applications	Dmitriy Zaporozhets	2012-09-20	1	-0/+21