Branch: refs/heads/master
Home: https://github.com/openSUSE/open-build-service
Commit: f82e5f4682a4528a22ea9d3a934216c22dc63bc9
https://github.com/openSUSE/open-build-service/commit/f82e5f4682a4528a22ea9d...
Author: Björn Geuken
Date: 2017-04-18 (Tue, 18 Apr 2017)
Changed paths:
M src/api/lib/authenticator.rb
Log Message:
-----------
[api] Create a user in kerberos mode if it does not exist
In Kerberos mode the authentication happens by the TDC (ticket
distribution centre). That means any user with a ticket is entitled to
have an account in OBS.
Commit: 77644b3fa0924601cecd14a2c7a560abdc957c3c
https://github.com/openSUSE/open-build-service/commit/77644b3fa0924601cecd14...
Author: Björn Geuken
Date: 2017-04-19 (Wed, 19 Apr 2017)
Changed paths:
M src/api/app/controllers/webui/webui_controller.rb
M src/api/app/helpers/webui/webui_helper.rb
M src/api/app/views/webui/user/login.html.haml
M src/api/lib/authenticator.rb
Log Message:
-----------
[webui] Implement kerberos authentication in webui
* Handle login via kerberos in webui (require_login filter)
* Disable sign up ui when kerberos mode is enabled
Commit: f828d0c85a47000dd43e09fca4b6005db7090085
https://github.com/openSUSE/open-build-service/commit/f828d0c85a47000dd43e09...
Author: Björn Geuken
Date: 2017-04-19 (Wed, 19 Apr 2017)
Changed paths:
M src/api/app/controllers/application_controller.rb
M src/api/app/controllers/webui/webui_controller.rb
M src/api/app/helpers/webui/webui_helper.rb
M src/api/config/options.yml.example
M src/api/lib/authenticator.rb
Log Message:
-----------
[api] Introduce a configuration option to enable and disable kerberos mode easily
Before this was handled via the principal configuration. With this
change OBS admins can keep the principal configuration and use the
'kerberos_mode' flag instead.
Commit: a6d550f9b2a0b38f3b1d60ff0a6cbee8b1f3a49f
https://github.com/openSUSE/open-build-service/commit/a6d550f9b2a0b38f3b1d60...
Author: Björn Geuken
Date: 2017-04-19 (Wed, 19 Apr 2017)
Changed paths:
M src/api/app/controllers/webui/user_controller.rb
M src/api/app/views/layouts/webui/_personal_navigation.html.erb
Log Message:
-----------
[webui] Show a login link in kerberos mode
In case that a user logged himself out, he can use that link to login
again.
Commit: 1c264f5992dbc0ac9f84eadb4092a19414d1da9a
https://github.com/openSUSE/open-build-service/commit/1c264f5992dbc0ac9f84ea...
Author: Björn Geuken
Date: 2017-04-19 (Wed, 19 Apr 2017)
Changed paths:
M src/api/app/models/user.rb
M src/api/spec/controllers/webui/user_controller_spec.rb
M src/api/spec/models/user_spec.rb
Log Message:
-----------
[webui] Drop validation of user's email address
Commit: 95b58d65dc0617519ec95a556e60159a0fd09185
https://github.com/openSUSE/open-build-service/commit/95b58d65dc0617519ec95a...
Author: Björn Geuken
Date: 2017-04-19 (Wed, 19 Apr 2017)
Changed paths:
M src/api/app/models/user.rb
Log Message:
-----------
[api] Drop explicitly setting last_logged_in_at on user creation
That is taken care of by a on create before filter. There is also a test
that covers this behaviour.
Commit: f9a8bb317578e0fcb61969a5a8c81d560d6d9379
https://github.com/openSUSE/open-build-service/commit/f9a8bb317578e0fcb61969...
Author: Björn Geuken
Date: 2017-04-19 (Wed, 19 Apr 2017)
Changed paths:
A src/api/spec/lib/authenticator_spec.rb
M src/api/spec/requests/kerberos_login_spec.rb
Log Message:
-----------
[ci] Add tests for Authenticator and update kerberos API tests
Some parts of the kerberos login tests were very specific. Therefore they
got moved to the Authenticator tests.
The remaining kerberos login tests are now covering:
* Successful logins
* Failures due to AuthenticationRequiredError of Authenticator instance
* Setting of 'Negotiate' header to inform clients that kerberos auth is
required
* Creation of new account when user authenticates via kerberos the first time
Commit: 529d2572c45922e504ea60c92dd41782c9abd00d
https://github.com/openSUSE/open-build-service/commit/529d2572c45922e504ea60...
Author: Björn Geuken
Date: 2017-04-19 (Wed, 19 Apr 2017)
Changed paths:
A src/api/spec/cassettes/Login/in_kerberos_mode/for_a_normal_request_that_requires_login/and_Negotiate_header_is_not_set/informs_the_client_tool_browser_that_kerberos_authentication_is_required.yml
A src/api/spec/cassettes/Login/in_kerberos_mode/for_a_normal_request_that_requires_login/and_Negotiate_header_is_not_set/informs_users_about_failed_kerberos_authentication_and_possible_cause.yml
A src/api/spec/cassettes/Login/in_kerberos_mode/for_a_request_where_GSSAPI_raises_an_exception/does_not_authenticate_the_user.yml
M src/api/spec/features/webui/login_spec.rb
M src/api/spec/lib/authenticator_spec.rb
M src/api/spec/requests/kerberos_login_spec.rb
A src/api/spec/support/shared_contexts/a_kerberos_mock.rb
Log Message:
-----------
[ci] Add rspec tests for kerberos authentication via webui
Use a shared context to setup mocking a successful ticket creation via
GSSAPI.
Commit: 18bd64304522c19bb5b68cfb5b93e3611d873496
https://github.com/openSUSE/open-build-service/commit/18bd64304522c19bb5b68c...
Author: Björn Geuken
Date: 2017-04-19 (Wed, 19 Apr 2017)
Changed paths:
M ReleaseNotes-2.9
Log Message:
-----------
[doc] Mention Kerberos mode in release notes for 2.9
Commit: fbb809b0c34a850217bbcfa9647521dd73286e51
https://github.com/openSUSE/open-build-service/commit/fbb809b0c34a850217bbcf...
Author: Björn Geuken
Date: 2017-04-19 (Wed, 19 Apr 2017)
Changed paths:
M .rubocop_todo.yml
Log Message:
-----------
[ci] Update rubocop check: Metrics/ModuleLength
Commit: eecbe93afad38930cf7430e05cd17f154dd7e6aa
https://github.com/openSUSE/open-build-service/commit/eecbe93afad38930cf7430...
Author: Evan Rolfe
Date: 2017-04-20 (Thu, 20 Apr 2017)
Changed paths:
M src/api/lib/authenticator.rb
M src/api/spec/features/webui/login_spec.rb
M src/api/spec/lib/authenticator_spec.rb
M src/api/spec/requests/kerberos_login_spec.rb
M src/api/spec/support/shared_contexts/a_kerberos_mock.rb
Log Message:
-----------
[ci] do not mock Authenticator class in kerberos request spec
Commit: a8cc2ddf2b9183a3dbed10da2e284a42b2333a23
https://github.com/openSUSE/open-build-service/commit/a8cc2ddf2b9183a3dbed10...
Author: Björn Geuken
Date: 2017-04-20 (Thu, 20 Apr 2017)
Changed paths:
M src/api/lib/authenticator.rb
M src/api/spec/features/webui/login_spec.rb
M src/api/spec/lib/authenticator_spec.rb
M src/api/spec/requests/kerberos_login_spec.rb
M src/api/spec/support/shared_contexts/a_kerberos_mock.rb
Log Message:
-----------
Merge pull request #2 from evanrolfe/kerberos_webui_integration_spec
[ci] do not mock Authenticator class in kerberos request spec
Commit: 4761c2d86aedf7cf54cd95cafee96cb9a89b79aa
https://github.com/openSUSE/open-build-service/commit/4761c2d86aedf7cf54cd95...
Author: Björn Geuken
Date: 2017-04-20 (Thu, 20 Apr 2017)
Changed paths:
M .rubocop_todo.yml
M ReleaseNotes-2.9
M src/api/app/controllers/application_controller.rb
M src/api/app/controllers/webui/user_controller.rb
M src/api/app/controllers/webui/webui_controller.rb
M src/api/app/helpers/webui/webui_helper.rb
M src/api/app/models/user.rb
M src/api/app/views/layouts/webui/_personal_navigation.html.erb
M src/api/app/views/webui/user/login.html.haml
M src/api/config/options.yml.example
M src/api/lib/authenticator.rb
A src/api/spec/cassettes/Login/in_kerberos_mode/for_a_normal_request_that_requires_login/and_Negotiate_header_is_not_set/informs_the_client_tool_browser_that_kerberos_authentication_is_required.yml
A src/api/spec/cassettes/Login/in_kerberos_mode/for_a_normal_request_that_requires_login/and_Negotiate_header_is_not_set/informs_users_about_failed_kerberos_authentication_and_possible_cause.yml
A src/api/spec/cassettes/Login/in_kerberos_mode/for_a_request_where_GSSAPI_raises_an_exception/does_not_authenticate_the_user.yml
M src/api/spec/controllers/webui/user_controller_spec.rb
M src/api/spec/features/webui/login_spec.rb
A src/api/spec/lib/authenticator_spec.rb
M src/api/spec/models/user_spec.rb
M src/api/spec/requests/kerberos_login_spec.rb
A src/api/spec/support/shared_contexts/a_kerberos_mock.rb
Log Message:
-----------
Merge pull request #2996 from bgeuken/kerberos_webui
Kerberos authentication via webui and some minor improvements
Compare: https://github.com/openSUSE/open-build-service/compare/09740e14a66e...4761c2...
