delta/gitlab/gitlab-ce.git/app/controllers/application_controller.rb, branch button-focus-state

Implement U2F registration.

2016-06-06T07:20:31+00:00

- Move the `TwoFactorAuthsController`'s `new` action to `show`, since
  the page is not used to create a single "two factor auth" anymore. We
  can have a single 2FA authenticator app, along with any number of U2F
  devices, in any combination, so the page will be accessed after the
  first "two factor auth" is created.
- Add the `u2f` javascript library, which provides an API to the
  browser's U2F implementation.
- Add tests for the JS components

Add a `U2fRegistrations` table/model.

2016-06-06T07:20:31+00:00

- To hold registrations from U2F devices, and to authenticate them.
- Previously, `User#two_factor_enabled` was aliased to the
  `otp_required_for_login` column on `users`.
- This commit changes things a bit:
    - `User#two_factor_enabled` is not a method anymore
    - `User#two_factor_enabled?` checks both the
      `otp_required_for_login` column, as well as `U2fRegistration`s
    - Change all instances of `User#two_factor_enabled` to
      `User#two_factor_enabled?`
- Add the `u2f` gem, and implement registration/authentication at the
  model level.

Merge branch 'upgrade-devise-two-factor' into 'master'

2016-06-02T00:44:41+00:00


Upgrade devise, devise-two-factor, and attr_encrypted

Devise 4 includes support for Rails 5, working towards #14286. devise-async doesn't support Devise 4.0 and in 4.1 the bug that was blocking using Devise's built-in ActiveJob integration was fixed. So devise-async is removed. devise-two-factor 3.0.0 is required for Devise 4 support.

attr_encrypted and encryptor are optional but recommended upgrades for devise-two-factor 3.0.0. The mode and algorithm will need to be changed in order to update to attr_encrypted 4.x in the future.

See merge request !4216

Add leading comment space cop

2016-05-31T22:33:46+00:00

Upgrade devise and devise-two-factor, remove devise-async

2016-05-30T19:51:21+00:00

Devise (3.5.4 => 4.1.1) Changelog:
https://github.com/plataformatec/devise/blob/master/CHANGELOG.md

devise-two-factor (2.0.1 => 3.0.0) Changelog:
https://github.com/tinfoil/devise-two-factor/blob/master/CHANGELOG.md

These are reliant on each other, so they have to be upgraded together.

devise-async is no longer necessary as Devise 4.1 fixes a bug with the
ActiveJob integration.

Codestyle: make sure we have space around operators

2016-05-13T07:46:56+00:00

Use sign out path only if not empty

2016-05-03T20:10:49+00:00

Add Sentry program context even without a current user

2016-04-14T17:56:30+00:00

Include GonHelper separately and remove created_at in factory

2016-04-14T14:25:27+00:00

Add spec for deletion of authorized OAuth2 application

2016-04-14T14:24:58+00:00

Closes #14370

Move gon function into its own helper