dfc2542f55
use full caps RSS instead of rss
2017-05-24 22:29:59 +02:00
6efe9c2f14
atom links with rss token instead of private token
2017-05-24 22:29:59 +02:00
7d02bcd2e0
Redirect from redirect routes to canonical routes
2017-05-05 12:11:57 -07:00
d49768296c
Auto-correct `RSpec/DescribedClass` violations
2017-05-01 11:13:33 -04:00
1735ed6139
rename cache db column with `_cached` suffix
2017-04-06 10:01:14 +02:00
a49c5d1836
Rename skip_tfa session variable to skip_two_factor
2017-04-06 10:01:13 +02:00
8e66514056
Rename check_2fa_requirement to check_two_factor_requirement
2017-04-06 10:01:13 +02:00
a3430f011f
Support 2FA requirement per-group
2017-04-06 10:01:13 +02:00
6683fdcfb0
Add nested groups support to the routing
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
2016-11-23 14:08:36 +02:00
519275c110
fixes part1 of files to start using active tense
2016-08-09 15:06:23 +01:00
9e211091a8
Enable Style/EmptyLines cop, remove redundant ones
2016-07-01 21:56:17 +02:00
abca19da8b
Use HTTP matchers if possible
2016-06-27 20:10:42 +02:00
0dff6fd714
Fix rubocop spec.
2016-06-03 10:11:36 +05:30
b4b0248577
Parts of spec names with "when" should be contexts.
2016-06-03 09:00:39 +05:30
05b319b0b4
Perform private token and personal access token authentication in the same `before_action`.
...
- So that the check for valid personal access tokens happens only if
private token auth fails.
2016-06-01 14:04:38 +05:30
d915e7d5ca
Reuse the private token param and header for personal access tokens.
...
- https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/3749#note_11626427
- Personal access tokens are still a separate entity as far as the
codebase is concerned - they just happen to use the same entry point
as private tokens.
- Update tests and documentation to reflect this change
2016-05-11 10:16:23 +05:30
bafbf22c6a
Address @DouweM's feedback on !3749 .
...
- Use `TokenAuthenticatable` to generate the personal access token
- Remove a check for `authenticity_token` in application controller;
this should've been `authentication_token`, maybe, and doesn't make
any sense now.
- Have the datepicker appear inline
2016-04-28 22:28:36 +05:30
ade40fdcd2
Authenticate non-API requests with personal access tokens.
...
- Rename the `authenticate_user_from_token!` filter to
`authenticate_user_from_private_token!`
- Add a new `authenticate_user_from_personal_access_token!` filter
- Add tests for both.
2016-04-28 22:28:36 +05:30
7c51d5efec
Fix some specs
2016-03-20 22:55:08 +01:00
07efb17e10
Fix 403 Access Denied error messages when accessing Labels section in a project that has MRs disabled but issues enabled
...
Closes #1813
2015-06-18 03:15:05 -07:00
0c4a70a306
Updated rspec to rspec 3.x syntax
...
Signed-off-by: Jeroen van Baarsen <jeroenvanbaarsen@gmail.com>
2015-02-12 19:17:35 +01:00
a7e0ca9e83
Add trailing newline to all text files.
...
Present in the large majority of files of each respective type.
2014-06-21 11:20:22 +02:00
d89527839e
fix most of warnings
2013-12-15 00:05:10 +04:00
ca1b67ce38
Don't show users password change page if ldap users
2013-09-17 22:38:08 -04:00
Alexis Reigel