Commit graph

13 commits

Author SHA1 Message Date
Robert Speicher
567a25b630 Ensure session_expire_delay field exists before accessing it
Closes #1798
2015-06-13 00:31:08 -04:00
themaze75
1d080f5745 session_expire_seconds => session_expire_delay
delay is in seconds
more legible code in session_store
Added `GitLab restart required` help block to session_expire_delay
2015-06-10 22:10:00 -04:00
Eric Maziade
84a414fe53 Add session expiration delay configuration through UI application
settings
2015-06-05 11:50:37 -04:00
Dmitriy Zaporozhets
c1d2640b2e
Merge branch 'redis_settings'
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>

Conflicts:
	CHANGELOG
2014-08-28 15:03:22 +03:00
Jacob Vosmaer
c0b146899b Store sessions in a Redis namespace
This makes less of a mess of the Redis root.
2014-08-26 13:44:39 +02:00
Jacob Vosmaer
99b81be887 Expire Rack sessions after 1 week 2014-08-26 10:58:16 +02:00
Jacob Vosmaer
8d78662e69 Give the Rails cache its own Redis namespace
Before this change, Rails cache data was stored in a global Redis
namespace. As a consequence, clearing the Rails cache (`rake
cache:clear`) would also delete all Sidekiq queue data and session
storage. This change puts all Rails cache data in a `cache:gitlab`
namespace, making `rake cache:clear` safe again.
2014-04-15 15:53:14 +02:00
Marin Jankovski
c447a2131d Enable secure option if https is used. 2013-12-25 12:30:33 +01:00
vollnhals
67c18aa941 Respect the configured redis URL when initializing the session store
It was not possible to start Gitlab with a redis server running on another host or port. Every other subsystem that uses redis respects the settings in config/resque.yml.

This patch uses the configured url from the cache_store configuration.
The cache_store configuration already loads the correct redis url from config/resque.yml.

Closes #5406
2013-10-30 17:11:56 +01:00
Sytse Sijbrandij
ba7c1764be The cookie store is vulnerable to session replay attacks. 2013-10-11 17:54:46 +02:00
amouhzi
39d8a64d25 Fixes grack authentification under relative_url_root
Ref: e6159b8725
Ref: https://github.com/gitlabhq/gitlabhq/pull/3204
Ref: https://github.com/gitlabhq/gitlabhq/issues/1228

Add Rails' variable in application.rb to support relative url

This variable is used by assets compilation and other modules.

Note that user needs to change application.rb too

Restrict session cookie to the relative path if set.

Ref: 2c2f1e3185

Fix Update attachment_uploader.rb bug with relative URL

See: 161afda3fa

Fix Wall relative bug with attachement files (javascript)
2013-08-15 21:25:09 +02:00
Marin Jankovski
a58d311262 Secure and httponly options on cookie. 2012-09-26 16:02:31 +02:00
gitlabhq
9ba1224867 init commit 2011-10-09 00:36:38 +03:00