Commit Graph

3725 Commits

Author SHA1 Message Date
Sebastian Sdorra
10d4f79302 Fix SonarQube issues 2020-10-27 14:21:24 +01:00
Sebastian Sdorra
4edb406420 Integrate trace api with AdvancedHttpClient 2020-10-27 14:21:24 +01:00
Sebastian Sdorra
c5bf122132 Implemented default LoggingExporter for trace api 2020-10-27 14:21:24 +01:00
CES Marvin
520db79a38 prepare for next development iteration 2020-10-27 08:35:13 +00:00
CES Marvin
1db75f4cf3 release version 2.8.0 2020-10-27 08:00:25 +00:00
René Pfeuffer
6002e560ef Heed review remarks 2020-10-26 10:19:59 +01:00
René Pfeuffer
1ca18cd44c Do not create web tokens for api keys
This fixes a way for privilege escalation with api keys.
2020-10-26 10:19:59 +01:00
René Pfeuffer
d2d237e0c2 Merge pull request #1385 from scm-manager/bugfix/logging_error_reading_api_token
Reduce logging of ApiTokenRealm
2020-10-23 08:15:22 +02:00
Sebastian Sdorra
3be2d5acb4 Revert removal of DecodingException catch 2020-10-22 16:05:34 +02:00
Sebastian Sdorra
1195026fe6 Fix handling of snapshot plugin dependencies 2020-10-22 15:06:39 +02:00
Sebastian Sdorra
86b4dfb92a log stacktrace of failed api token parsing only if trace is enabled 2020-10-22 14:46:40 +02:00
Sebastian Sdorra
7b91cf82bf Reduce logging of ApiTokenRealm 2020-10-22 14:39:09 +02:00
Sebastian Sdorra
553c90ec73 Fix missing default permission for managing public gpg keys 2020-10-16 08:26:20 +02:00
Sebastian Sdorra
465a9e635b Rename createFallbackMailAddress to more explicit getMailOrFallback 2020-10-15 11:48:17 +02:00
René Pfeuffer
be6bb8bf37 Rename "mail host" to "mail domain name" 2020-10-14 15:46:50 +02:00
René Pfeuffer
e60ea987dd Make mail optional for user 2020-10-14 15:46:50 +02:00
René Pfeuffer
7fc7e33c0c Add fallback email to me dto 2020-10-14 15:46:50 +02:00
René Pfeuffer
9c233c1926 Add fallback mail host to global config 2020-10-14 15:46:50 +02:00
CES Marvin
bb9f1adc52 prepare for next development iteration 2020-10-14 12:38:13 +00:00
CES Marvin
eb126a5bbe release version 2.7.1 2020-10-14 12:03:24 +00:00
René Pfeuffer
ab6e5fd6d6 Fix unit test 2020-10-14 11:43:47 +02:00
René Pfeuffer
f35fddc505 Add debug log for successful login 2020-10-14 11:28:21 +02:00
René Pfeuffer
07a85ef9c1 Check token content before handling them
This adds plausibility checks before handling tokens as for example jwt
or api keys. Doing so we generate less error logs and therefore we cause
less confusion.
2020-10-14 11:11:23 +02:00
René Pfeuffer
c9410a6392 Add logging 2020-10-14 08:56:07 +02:00
René Pfeuffer
2c640009cc Fix anonymous migration for deleted repositories 2020-10-14 08:36:57 +02:00
CES Marvin
befd50eeef prepare for next development iteration 2020-10-12 13:26:08 +00:00
CES Marvin
abe8413802 release version 2.7.0 2020-10-12 12:41:15 +00:00
René Pfeuffer
2f5b6d98c6 Merge branch 'support/2.6.x' into develop 2020-10-09 12:16:23 +02:00
Konstantin Schaper
f2a53644b6 introduce api for handling token validation failed exception 2020-10-09 07:20:08 +02:00
René Pfeuffer
d03763671b Mind review remarks 2020-10-06 15:42:26 +02:00
René Pfeuffer
b357c1d524 Clean up class 2020-10-05 10:53:30 +02:00
René Pfeuffer
8733ca97af Clean up class 2020-10-05 10:53:30 +02:00
René Pfeuffer
50c0503531 Fix creation of first key 2020-10-05 10:53:30 +02:00
René Pfeuffer
a6814fb938 Delete api keys when user is deleted 2020-10-05 10:53:30 +02:00
René Pfeuffer
95bad28b0a Let api key realm check username/password authentication 2020-10-05 10:53:30 +02:00
René Pfeuffer
ec57dc0731 Add UI for api keys 2020-10-05 10:53:30 +02:00
René Pfeuffer
20345c895f Add created date to api key 2020-10-05 10:53:30 +02:00
René Pfeuffer
1def884779 Fix rest path 2020-10-05 10:53:30 +02:00
René Pfeuffer
25a87296a7 Add permission check 2020-10-05 10:53:30 +02:00
René Pfeuffer
bd247a4332 Rename role -> permissionRole 2020-10-05 10:53:30 +02:00
René Pfeuffer
4ec75781b7 Add scope from role for api token realm 2020-10-05 10:53:30 +02:00
René Pfeuffer
e3e96f7813 Use data instead of configuration store 2020-10-05 10:53:30 +02:00
René Pfeuffer
12ab218eba Add realm for api key 2020-10-05 10:53:30 +02:00
René Pfeuffer
91471c0ec0 Create rest endpoint to delete api keys 2020-10-05 10:53:30 +02:00
René Pfeuffer
0923c2d63e Create rest endpoint to create new api keys 2020-10-05 10:53:30 +02:00
René Pfeuffer
0dc96c2403 Use string tokens 2020-10-05 10:53:30 +02:00
René Pfeuffer
2f96ec0d21 Create and read tokens for api keys 2020-10-05 10:53:30 +02:00
René Pfeuffer
905fc4158a Add rest resource for api keys 2020-10-05 10:53:30 +02:00
René Pfeuffer
4129f55f27 Implement service for API keys 2020-10-05 10:53:29 +02:00
René Pfeuffer
fb3ba789ea Increase test to fix flappy test
CI fails from time to time in a way one gets, when the timeout is
reduced. So we increase the timeout here.
2020-09-30 10:27:02 +02:00