Robert Speicher
567a25b630
Ensure session_expire_delay
field exists before accessing it
...
Closes #1798
2015-06-13 00:31:08 -04:00
themaze75
1d080f5745
session_expire_seconds => session_expire_delay
...
delay is in seconds
more legible code in session_store
Added `GitLab restart required` help block to session_expire_delay
2015-06-10 22:10:00 -04:00
Eric Maziade
84a414fe53
Add session expiration delay configuration through UI application
...
settings
2015-06-05 11:50:37 -04:00
Dmitriy Zaporozhets
c1d2640b2e
Merge branch 'redis_settings'
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
Conflicts:
CHANGELOG
2014-08-28 15:03:22 +03:00
Jacob Vosmaer
c0b146899b
Store sessions in a Redis namespace
...
This makes less of a mess of the Redis root.
2014-08-26 13:44:39 +02:00
Jacob Vosmaer
99b81be887
Expire Rack sessions after 1 week
2014-08-26 10:58:16 +02:00
Jacob Vosmaer
8d78662e69
Give the Rails cache its own Redis namespace
...
Before this change, Rails cache data was stored in a global Redis
namespace. As a consequence, clearing the Rails cache (`rake
cache:clear`) would also delete all Sidekiq queue data and session
storage. This change puts all Rails cache data in a `cache:gitlab`
namespace, making `rake cache:clear` safe again.
2014-04-15 15:53:14 +02:00
Marin Jankovski
c447a2131d
Enable secure option if https is used.
2013-12-25 12:30:33 +01:00
vollnhals
67c18aa941
Respect the configured redis URL when initializing the session store
...
It was not possible to start Gitlab with a redis server running on another host or port. Every other subsystem that uses redis respects the settings in config/resque.yml.
This patch uses the configured url from the cache_store configuration.
The cache_store configuration already loads the correct redis url from config/resque.yml.
Closes #5406
2013-10-30 17:11:56 +01:00
Sytse Sijbrandij
ba7c1764be
The cookie store is vulnerable to session replay attacks.
2013-10-11 17:54:46 +02:00
amouhzi
39d8a64d25
Fixes grack authentification under relative_url_root
...
Ref: e6159b8725
Ref: https://github.com/gitlabhq/gitlabhq/pull/3204
Ref: https://github.com/gitlabhq/gitlabhq/issues/1228
Add Rails' variable in application.rb to support relative url
This variable is used by assets compilation and other modules.
Note that user needs to change application.rb too
Restrict session cookie to the relative path if set.
Ref: 2c2f1e3185
Fix Update attachment_uploader.rb bug with relative URL
See: 161afda3fa
Fix Wall relative bug with attachement files (javascript)
2013-08-15 21:25:09 +02:00
Marin Jankovski
a58d311262
Secure and httponly options on cookie.
2012-09-26 16:02:31 +02:00
gitlabhq
9ba1224867
init commit
2011-10-09 00:36:38 +03:00