gitlab-org--gitlab-foss/spec
Timothy Andrew 7fa06ed55d Calls to the API are checked for scope.
- Move the `Oauth2::AccessTokenValidationService` class to
  `AccessTokenValidationService`, since it is now being used for
  personal access token validation as well.

- Each API endpoint declares the scopes it accepts (if any). Currently,
  the top level API module declares the `api` scope, and the `Users` API
  module declares the `read_user` scope (for GET requests).

- Move the `find_user_by_private_token` from the API `Helpers` module to
  the `APIGuard` module, to avoid littering `Helpers` with more
  auth-related methods to support `find_user_by_private_token`
2016-12-16 16:29:31 +05:30
..
bin DRY up the specs for bin/changelog 2016-11-03 17:35:06 +00:00
config Make mail_room idle_timeout option configurable. 2016-11-16 12:46:37 +01:00
controllers Merge branch 'jej-note-search-uses-finder' into 'security' 2016-12-15 11:40:12 -03:00
db/production Allow users to seed the initial runner registration token using an environment variable 2016-12-01 17:21:21 -08:00
factories Add a `scopes` column to the `personal_access_tokens` table 2016-12-16 15:08:10 +05:30
features Allow creating personal access tokens / OAuth applications with scopes. 2016-12-16 15:08:10 +05:30
finders Merge branch 'jej-24637-move-issue-visible_to_user-to-finder' into 'security' 2016-12-15 11:41:04 -03:00
fixtures adds impersonator variable and makes sudo usage overall more clear 2016-12-07 14:42:51 +00:00
helpers Add Gitlab::Middleware::Multipart 2016-12-15 12:26:36 +01:00
initializers
javascripts Merge branch 'add-object-assign-polyfill' into 'master' 2016-12-15 16:53:08 +00:00
lib Merge branch 'show-commit-status-from-latest-pipeline' into 'master' 2016-12-15 19:48:00 +00:00
mailers Merge branch '24880-configurable-plaintext-emails' into 'master' 2016-11-29 12:05:23 +00:00
migrations Encode when migrating ProcessCommitWorker jobs 2016-12-13 16:52:49 +01:00
models Merge branch 'show-commit-status-from-latest-pipeline' into 'master' 2016-12-15 19:48:00 +00:00
policies Update effected tests 2016-12-04 17:32:33 +01:00
requests Calls to the API are checked for scope. 2016-12-16 16:29:31 +05:30
routing Add support for nested groups to admin routing 2016-12-11 10:30:10 +02:00
serializers fix transient timing failure adding timecop 2016-12-14 14:49:10 +01:00
services Calls to the API are checked for scope. 2016-12-16 16:29:31 +05:30
support Add Gitlab::Middleware::Multipart 2016-12-15 12:26:36 +01:00
tasks/gitlab Don't allow to specify a repo or version when installing Workhorse 2016-12-01 19:22:46 +01:00
uploaders Add Gitlab::Middleware::Multipart 2016-12-15 12:26:36 +01:00
views Fix test 2016-12-12 13:16:52 -06:00
workers Merge branch 'zj-guest-reads-public-builds' into 'master' 2016-12-06 13:54:16 +00:00
factories_spec.rb
rails_helper.rb
rake_helper.rb Move task helpers to a module 2016-11-30 12:20:21 +01:00
simplecov_env.rb
spec_helper.rb Pass commit data to ProcessCommitWorker 2016-12-01 13:36:06 +01:00
teaspoon_env.rb