b7dfe2ae40
Add latest changes from gitlab-org/gitlab@master
2019-09-13 13:26:31 +00:00
76e8960f4a
Externalize strings in flash messages
...
- Externalize strings in controllers
- Update PO file
2019-04-08 14:17:45 +00:00
3a2abc1d50
Enable the Layout/ExtraSpacing cop
...
Signed-off-by: Rémy Coutable <remy@rymai.me>
2019-01-24 13:05:45 +01:00
73322a0e55
Enable frozen string in app/controllers/**/*.rb
...
Enables frozen string for the following:
* app/controllers/*.rb
* app/controllers/admin/**/*.rb
* app/controllers/boards/**/*.rb
* app/controllers/ci/**/*.rb
* app/controllers/concerns/**/*.rb
Partially addresses #47424 .
2018-09-18 21:22:45 -07:00
2039c8280d
Disable existing offenses for the CodeReuse cops
...
This whitelists all existing offenses for the various CodeReuse cops, of
which most are triggered by the CodeReuse/ActiveRecord cop.
2018-09-11 17:32:00 +02:00
eaada9d706
use Gitlab::UserSettings directly as a singleton instead of including/extending it
2018-02-02 18:39:55 +00:00
6304fe44ec
Allow logged in user to change his password
...
Users were unable to change their password through the "Reset password"
link that was sent to their email if they were logged in. This is due to
a default controller filter from Devise that requires the user to not be
logged in in order to use this link.
2017-12-31 19:59:07 -05:00
257fd57134
Allow password authentication to be disabled entirely
2017-11-23 13:16:14 +00:00
37383d9a9d
Rollsback changes made to signing_enabled.
2017-09-01 10:51:40 +01:00
672a68d372
Fixes needed when GitLab sign-in is not enabled
...
When sign-in is disabled:
- skip password expiration checks
- prevent password reset requests
- don’t show Password tab in User Settings
- don’t allow login with username/password for Git over HTTP requests
- render 404 on requests to Profiles::PasswordsController
2017-07-13 10:08:27 -04:00
599a6d7873
Allow the initial admin to set a password
...
Closes #1980
2016-03-04 17:37:57 -05:00
f4ec906e90
Use devise paranoid mode and ensure the same message is returned every time
...
Skipped CI because it has already passed. Had to rebase due to CHANGELOG.
2015-12-09 18:40:37 -06:00
b8ff38b1d4
Refactor PasswordsController to use before_actions
2015-10-01 21:47:27 -04:00
292bca0546
Only allow password reset emails once per minute
...
Addresses internal https://dev.gitlab.org/gitlab/gitlabhq/issues/2611
2015-09-30 15:38:21 -04:00
3a4274e19e
Take advantage of `Devise.sign_in_after_reset_password`
2015-09-30 14:35:00 -04:00
b6318297fc
Use User#two_factor_enabled instead of otp_required_for_login
2015-06-19 15:14:37 -04:00
af428b1259
Fill in email on the new password form
2015-05-16 14:03:18 -06:00
c68c23210b
Redirect if password reset token is expired
...
Don't display the password editing form if the user's token is expired;
redirect to the form that allows users to request a new password reset
token.
2015-05-16 14:03:18 -06:00
24bef5e67a
Handle password reset for users with 2FA enabled
2015-05-11 14:31:31 -04:00
3dfcb95f0d
Use ruby 1.9 hash syntax
2015-01-23 17:41:10 -08:00
a740e2d6d1
Do not allow password reset for ldap user.
2014-03-18 12:25:49 +01:00
3e09e6f7b8
Move Profile related controllers under Profiles:: module
2013-06-24 18:24:14 +03:00
00882b3c33
Prevent infinit password change by settin password_expires_at to nil
2013-06-13 20:21:51 +03:00
46231f0f1d
Fix password set form and infinite loop
2013-06-13 20:16:48 +03:00
5b40780290
Password expire: implement password resource inside profile. add before_fiter check
2013-06-13 19:53:04 +03:00
GitLab Bot