delta/gitlab/gitlab-ce.git/config/initializers/doorkeeper.rb, branch 35942_api_binary_encoding gitlab.com: gitlab-org/gitlab-ce.git Backport gitlab-ee!2456 2017-07-27T16:09:46+00:00 Oswaldo Ferreira oswaldo@gitlab.com 2017-07-24T20:45:12+00:00 e561b142fa7c9dd636fd056fc0a6c84961d0cd46 






#20628 Enable implicit flow in Gitlab as OAuth Provider
2017-07-07T14:54:48+00:00

Mateusz Pytel
mateusz.pytel.87@gmail.com

2017-07-07T14:52:45+00:00

a7c571ae4d547443bd33b1d7f6e5819351239113

Closes #20628 by re-enabling implicit grant in Doorkeeper config. OAuth2 documentation refactored. 





Closes #20628 by re-enabling implicit grant in Doorkeeper config. OAuth2 documentation refactored. 







Add specs for Doorkeeper resource_owner_authenticator
2017-03-07T14:08:15+00:00

Markus Koller
markus-koller@gmx.ch

2017-02-08T19:23:43+00:00

b2ca28d24bfbb0a574fccdf1ea05d549ccd6bf66












Implement OpenID Connect identity provider
2017-03-07T13:54:35+00:00

Markus Koller
markus-koller@gmx.ch

2016-12-09T17:36:50+00:00

c4982890489d254da2fe998aab30bf257767ed5e












 Calls to the API are checked for scope.
2016-12-16T10:59:31+00:00

Timothy Andrew
mail@timothyandrew.net

2016-11-22T09:04:23+00:00

7fa06ed55d18af4d055041eb27d38fecf9b5548f

- Move the `Oauth2::AccessTokenValidationService` class to
  `AccessTokenValidationService`, since it is now being used for
  personal access token validation as well.

- Each API endpoint declares the scopes it accepts (if any). Currently,
  the top level API module declares the `api` scope, and the `Users` API
  module declares the `read_user` scope (for GET requests).

- Move the `find_user_by_private_token` from the API `Helpers` module to
  the `APIGuard` module, to avoid littering `Helpers` with more
  auth-related methods to support `find_user_by_private_token`





- Move the `Oauth2::AccessTokenValidationService` class to
  `AccessTokenValidationService`, since it is now being used for
  personal access token validation as well.

- Each API endpoint declares the scopes it accepts (if any). Currently,
  the top level API module declares the `api` scope, and the `Users` API
  module declares the `read_user` scope (for GET requests).

- Move the `find_user_by_private_token` from the API `Helpers` module to
  the `APIGuard` module, to avoid littering `Helpers` with more
  auth-related methods to support `find_user_by_private_token`







Small refactor and syntax fixes.
2016-08-18T21:47:26+00:00

Patricio Cano
suprnova32@gmail.com

2016-08-17T22:39:20+00:00

a4137411c62d093a55dc171665dc90325182bb04












Removed unnecessary service for user retrieval and improved API error message.
2016-08-18T21:47:26+00:00

Patricio Cano
suprnova32@gmail.com

2016-08-17T16:56:50+00:00

c29780086201b331091be3ba5df0653381cf0c2c












Added checks for 2FA to the API `/sessions` endpoint and the Resource Owner Password Credentials flow.
2016-08-18T21:47:26+00:00

Patricio Cano
suprnova32@gmail.com

2016-08-12T21:16:12+00:00

e2f9c87600e34a415d43c981e0182094b123771f












Improve Gitlab::Auth method names
2016-06-10T12:51:16+00:00

Jacob Vosmaer
jacob@gitlab.com

2016-06-10T12:51:16+00:00

0e896ffe4eebb8bcf04bc1327d498bb041faed56

Auth.find was a very generic name for a very specific method.
Auth.find_in_gitlab_or_ldap was inaccurate in GitLab EE where it also
looks in Kerberos.





Auth.find was a very generic name for a very specific method.
Auth.find_in_gitlab_or_ldap was inaccurate in GitLab EE where it also
looks in Kerberos.







Rename finder to find_in_gitlab_or_ldap
2016-06-02T11:42:18+00:00

Jacob Vosmaer
jacob@gitlab.com

2016-06-02T11:42:18+00:00

fea591e5c5796235d28eeec4d27759f87fa9d8e2