aboutsummaryrefslogtreecommitdiffstats
path: root/routers/admin/auths.go
Commit message (Collapse)AuthorAgeFilesLines
* Prevent empty LDAP search from deactivating all users (#9879) (#9890)dioss-Machiel2020-01-201-0/+1
| | | | | | | | | * Backport of #9879 (Add option to prevent LDAP from deactivating everything on empty search) * go fmtted Co-authored-by: Antoine GIRARD <sapk@users.noreply.github.com> Co-authored-by: zeripath <art27@cantab.net>
* Use gitea forked macaron (#7933)Tamal Saha2019-08-231-1/+1
| | | Signed-off-by: Tamal Saha <tamal@appscode.com>
* Fix error log when loading issues caused by a xorm bug (#7271)Lunny Xiao2019-06-231-1/+1
| | | | | | | | | | | | * fix error log when loading issues caused by a xorm bug * upgrade packages * fix fmt * fix Consistency * fix tests
* LDAP Public SSH Keys synchronization (#1844)Magnus Lindvall2018-05-241-18/+19
| | | | | | | | | | | | | | | | | | | * Add LDAP Key Synchronization feature Signed-off-by: Magnus Lindvall <magnus@dnmgns.com> * Add migration: add login source id column for public_key table * Only update keys if needed * Add function to only list pubkey synchronized from ldap * Only list pub ssh keys synchronized from ldap. Do not sort strings as ExistsInSlice does it. * Only get keys belonging to current login source id * Set default login source id to 0 * Some minor cleanup. Add integration tests (updete dep testify)
* Add option to use paged LDAP search when synchronizing users (#3895)Lauris BH2018-05-051-0/+5
|
* Handle refactor (#3339)Morgan Bazalgette2018-01-101-6/+6
| | | | | | * Replace all ctx.Handle with ctx.ServerError or ctx.NotFound * Change Handle(403) to NotFound, avoid using macaron's NotFound
* LDAP user synchronization (#1478)Lauris BH2017-05-101-4/+7
|
* Additional OAuth2 providers (#1010)Willem van Dreumel2017-05-011-7/+30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add google+ * sort signin oauth2 providers based on the name so order is always the same * update auth tip for google+ * add gitlab provider * add bitbucket provider (and some go fmt) * add twitter provider * add facebook provider * add dropbox provider * add openid connect provider incl. new format of tips section in "Add New Source" * lower the amount of disk storage for each session to prevent issues while building cross platform (and disk overflow) * imports according to goimport and code style * make it possible to set custom urls to gitlab and github provider (only these could have a different host) * split up oauth2 into multiple files * small typo in comment * fix indention * fix indentation * fix new line before external import * fix layout of signin part * update "broken" dependency
* Oauth2 consumer (#679)Willem van Dreumel2017-02-221-1/+28
| | | | | | | | | | | | | | | | | | | | | | | | | * initial stuff for oauth2 login, fails on: * login button on the signIn page to start the OAuth2 flow and a callback for each provider Only GitHub is implemented for now * show login button only when the OAuth2 consumer is configured (and activated) * create macaron group for oauth2 urls * prevent net/http in modules (other then oauth2) * use a new data sessions oauth2 folder for storing the oauth2 session data * add missing 2FA when this is enabled on the user * add password option for OAuth2 user , for use with git over http and login to the GUI * add tip for registering a GitHub OAuth application * at startup of Gitea register all configured providers and also on adding/deleting of new providers * custom handling of errors in oauth2 request init + show better tip * add ExternalLoginUser model and migration script to add it to database * link a external account to an existing account (still need to handle wrong login and signup) and remove if user is removed * remove the linked external account from the user his settings * if user is unknown we allow him to register a new account or link it to some existing account * sign up with button on signin page (als change OAuth2Provider structure so we can store basic stuff about providers) * from gorilla/sessions docs: "Important Note: If you aren't using gorilla/mux, you need to wrap your handlers with context.ClearHandler as or else you will leak memory!" (we're using gorilla/sessions for storing oauth2 sessions) * use updated goth lib that now supports getting the OAuth2 user if the AccessToken is still valid instead of re-authenticating (prevent flooding the OAuth2 provider)
* Fix string format verbs (#3637)Alexander Lunegov2016-12-221-1/+1
|
* Golint fixed for modules/setting (#262)Lunny Xiao2016-11-271-4/+4
| | | | | | * golint fixed for modules/setting * typo fixed and renamed UNIXSOCKET to UnixSocket
* go lint fixed for routers/adminLunny Xiao2016-11-211-9/+15
|
* Update import paths from github.com/go-gitea to code.gitea.io (#135)Sandro Santilli2016-11-101-7/+7
| | | | | | | - Update import paths from github.com/go-gitea to code.gitea.io - Fix import path for travis See https://docs.travis-ci.com/user/languages/go#Go-Import-Path
* Fix type in unused constant name (#111)Sandro Santilli2016-11-071-14/+14
| | | | | | | | | | | | | | | | | | * Write LDAP, SMTP, PAM, DLDAP back to all uppercase * Fix type in unused constant name * Other MixCased fixes * Complete MixerCasing of template constants * Re uppercase LTS and LDAPS suffixes * Uppercase JSON suffix in constant names * Proper case LoginNoType * Prefix unexported template path constants with "tpl"
* Security protocolsSandro Santilli2016-11-071-5/+5
|
* More mixageSandro Santilli2016-11-071-9/+9
|
* More...Sandro Santilli2016-11-071-5/+5
|
* Change import reference to match gitea instead of gogs (#37)Rémy Boulanouar2016-11-031-7/+7
|
* models/login_source: code improvementUnknwon2016-08-311-3/+2
|
* #3515 use alert instead 500 for duplicated login source nameUnknwon2016-08-311-2/+7
|
* Use SecurityProtocol to replace UseSSL in LDAP configUnknwon2016-07-081-16/+35
| | | | Initially proposed by #2376 and fixes #3068 as well.
* Rename module: middleware -> contextUnknwon2016-03-111-7/+7
|
* #1146 finsih UI work for access mode of collaboratorsUnknwon2016-03-051-3/+7
| | | | | Collaborators have write access as default, and can be changed via repository collaboration settings page to change between read, write and admin.
* LDAP: Fetch attributes in Bind DN context optionAdam Strzelecki2016-02-201-0/+1
| | | | | | | | | This is feature is workaround for #2628 (JumpCloud) and some other services that allow LDAP search only under BindDN user account, but not allow any LDAP search query in logged user DN context. Such approach is an alternative to minimal permissions security pattern for BindDN user.
* #1938 #1374 disable password change for non-local usersUnknwon2015-12-101-12/+12
|
* LDAP: Optional user name attribute specificationAdam Strzelecki2015-12-021-15/+16
| | | | | | | | | | | | | | | Consider following LDAP search query example: (&(objectClass=Person)(|(uid=%s)(mail=%s))) Right now on first login attempt Gogs will use the text supplied on login form as the newly created user name. In example query above the text matches against both e-mail or user name. So if user puts the e-mail then the new Gogs user name will be e-mail which may be undesired. Using optional user name attribute setting we can explicitly say we want Gogs user name to be certain LDAP attribute eg. `uid`, so even user will use e-mail to login 1st time, the new account will receive correct user name.
* #1637 able to skip verify for LDAPUnknwon2015-09-141-1/+2
|
* #697 disable captcha and new admin create user UIUnknwon2015-09-131-2/+2
|
* #1625 remove auto_register and makes it defaultUnknwon2015-09-121-6/+4
|
* #1620 add allowed domains for SMTP authUnknwon2015-09-111-5/+6
|
* finish new edit auth UIUnknwon2015-09-111-95/+72
|
* finish new add auth UIUnknwon2015-09-101-9/+26
|
* more minor fix on 1581Unknwon2015-09-101-2/+4
|
* Added LDAP simple auth support.Sergio Benitez2015-09-041-2/+8
|
* #1542 A way to skip TLS verify for SMTP authenticationUnknwon2015-08-291-37/+39
|
* Set IsAdmin using LDAPGirish Ramakrishnan2015-08-181-0/+2
| | | | | | | | | The IsAdmin flag is set based on whether the admin filter returned any result. The admin filter is applied with the user dn as the search root. In the future, we should update IsAdmin as well on each login. Alternately, we can have a periodic sync operation.
* Significantly enhanced LDAP support in Gogs.Sergio Benitez2015-08-121-9/+9
|
* Add PAM authenticationPaolo Borelli2015-04-241-0/+8
|
* #1124 LDAP add and edit form are misleadingUnknwon2015-03-241-15/+15
|
* Get username, name, surname and e-mail from LDAP serverLauris BH2015-02-081-18/+24
|
* Add suburl supportUnknwon2014-09-191-4/+4
|
* Allow Gogs to run from a suburl behind a reverse proxy. e.g. ↵Martin van Beurden2014-09-181-4/+5
| | | | | | | | | | | | | | http://mydomain.com/gogs/ Conflicts: modules/setting/setting.go Conflicts: templates/repo/release/list.tmpl templates/user/dashboard/dashboard.tmpl Conflicts: routers/repo/setting.go
* Continue working on new admin pagesUnknwon2014-08-291-0/+211
|
* In progress of name template name constantUnknown2014-06-221-196/+0
|
* Add tar.gz download button and other mirror updatesUnknown2014-06-081-9/+9
|
* Make gmail auth workUnknown2014-05-151-1/+1
|
* bug fixed #193Lunny Xiao2014-05-151-0/+1
|
* Merge pull request #192 from DerDackel/ldapsslLunny Xiao2014-05-151-0/+2
|\ | | | | Add LDAP over SSL support
| * Add LDAP over SSL supportSebastian Jackel2014-05-151-0/+2
| |
* | Fix edit auth page bugUnknown2014-05-121-4/+4
|/
generated by cgit v1.2.3 (git 2.39.1) at 2025-03-24 04:14:48 +0000