Branch: refs/heads/master Home: https://github.com/openSUSE/open-build-service Commit: f82e5f4682a4528a22ea9d3a934216c22dc63bc9 https://github.com/openSUSE/open-build-service/commit/f82e5f4682a4528a22ea9d... Author: Björn Geuken <bgeuken@suse.de> Date: 2017-04-18 (Tue, 18 Apr 2017) Changed paths: M src/api/lib/authenticator.rb Log Message: ----------- [api] Create a user in kerberos mode if it does not exist In Kerberos mode the authentication happens by the TDC (ticket distribution centre). That means any user with a ticket is entitled to have an account in OBS. Commit: 77644b3fa0924601cecd14a2c7a560abdc957c3c https://github.com/openSUSE/open-build-service/commit/77644b3fa0924601cecd14... Author: Björn Geuken <bgeuken@suse.de> Date: 2017-04-19 (Wed, 19 Apr 2017) Changed paths: M src/api/app/controllers/webui/webui_controller.rb M src/api/app/helpers/webui/webui_helper.rb M src/api/app/views/webui/user/login.html.haml M src/api/lib/authenticator.rb Log Message: ----------- [webui] Implement kerberos authentication in webui * Handle login via kerberos in webui (require_login filter) * Disable sign up ui when kerberos mode is enabled Commit: f828d0c85a47000dd43e09fca4b6005db7090085 https://github.com/openSUSE/open-build-service/commit/f828d0c85a47000dd43e09... Author: Björn Geuken <bgeuken@suse.de> Date: 2017-04-19 (Wed, 19 Apr 2017) Changed paths: M src/api/app/controllers/application_controller.rb M src/api/app/controllers/webui/webui_controller.rb M src/api/app/helpers/webui/webui_helper.rb M src/api/config/options.yml.example M src/api/lib/authenticator.rb Log Message: ----------- [api] Introduce a configuration option to enable and disable kerberos mode easily Before this was handled via the principal configuration. With this change OBS admins can keep the principal configuration and use the 'kerberos_mode' flag instead. Commit: a6d550f9b2a0b38f3b1d60ff0a6cbee8b1f3a49f https://github.com/openSUSE/open-build-service/commit/a6d550f9b2a0b38f3b1d60... Author: Björn Geuken <bgeuken@suse.de> Date: 2017-04-19 (Wed, 19 Apr 2017) Changed paths: M src/api/app/controllers/webui/user_controller.rb M src/api/app/views/layouts/webui/_personal_navigation.html.erb Log Message: ----------- [webui] Show a login link in kerberos mode In case that a user logged himself out, he can use that link to login again. Commit: 1c264f5992dbc0ac9f84eadb4092a19414d1da9a https://github.com/openSUSE/open-build-service/commit/1c264f5992dbc0ac9f84ea... Author: Björn Geuken <bgeuken@suse.de> Date: 2017-04-19 (Wed, 19 Apr 2017) Changed paths: M src/api/app/models/user.rb M src/api/spec/controllers/webui/user_controller_spec.rb M src/api/spec/models/user_spec.rb Log Message: ----------- [webui] Drop validation of user's email address Commit: 95b58d65dc0617519ec95a556e60159a0fd09185 https://github.com/openSUSE/open-build-service/commit/95b58d65dc0617519ec95a... Author: Björn Geuken <bgeuken@suse.de> Date: 2017-04-19 (Wed, 19 Apr 2017) Changed paths: M src/api/app/models/user.rb Log Message: ----------- [api] Drop explicitly setting last_logged_in_at on user creation That is taken care of by a on create before filter. There is also a test that covers this behaviour. Commit: f9a8bb317578e0fcb61969a5a8c81d560d6d9379 https://github.com/openSUSE/open-build-service/commit/f9a8bb317578e0fcb61969... Author: Björn Geuken <bgeuken@suse.de> Date: 2017-04-19 (Wed, 19 Apr 2017) Changed paths: A src/api/spec/lib/authenticator_spec.rb M src/api/spec/requests/kerberos_login_spec.rb Log Message: ----------- [ci] Add tests for Authenticator and update kerberos API tests Some parts of the kerberos login tests were very specific. Therefore they got moved to the Authenticator tests. The remaining kerberos login tests are now covering: * Successful logins * Failures due to AuthenticationRequiredError of Authenticator instance * Setting of 'Negotiate' header to inform clients that kerberos auth is required * Creation of new account when user authenticates via kerberos the first time Commit: 529d2572c45922e504ea60c92dd41782c9abd00d https://github.com/openSUSE/open-build-service/commit/529d2572c45922e504ea60... Author: Björn Geuken <bgeuken@suse.de> Date: 2017-04-19 (Wed, 19 Apr 2017) Changed paths: A src/api/spec/cassettes/Login/in_kerberos_mode/for_a_normal_request_that_requires_login/and_Negotiate_header_is_not_set/informs_the_client_tool_browser_that_kerberos_authentication_is_required.yml A src/api/spec/cassettes/Login/in_kerberos_mode/for_a_normal_request_that_requires_login/and_Negotiate_header_is_not_set/informs_users_about_failed_kerberos_authentication_and_possible_cause.yml A src/api/spec/cassettes/Login/in_kerberos_mode/for_a_request_where_GSSAPI_raises_an_exception/does_not_authenticate_the_user.yml M src/api/spec/features/webui/login_spec.rb M src/api/spec/lib/authenticator_spec.rb M src/api/spec/requests/kerberos_login_spec.rb A src/api/spec/support/shared_contexts/a_kerberos_mock.rb Log Message: ----------- [ci] Add rspec tests for kerberos authentication via webui Use a shared context to setup mocking a successful ticket creation via GSSAPI. Commit: 18bd64304522c19bb5b68cfb5b93e3611d873496 https://github.com/openSUSE/open-build-service/commit/18bd64304522c19bb5b68c... Author: Björn Geuken <bgeuken@suse.de> Date: 2017-04-19 (Wed, 19 Apr 2017) Changed paths: M ReleaseNotes-2.9 Log Message: ----------- [doc] Mention Kerberos mode in release notes for 2.9 Commit: fbb809b0c34a850217bbcfa9647521dd73286e51 https://github.com/openSUSE/open-build-service/commit/fbb809b0c34a850217bbcf... Author: Björn Geuken <bgeuken@suse.de> Date: 2017-04-19 (Wed, 19 Apr 2017) Changed paths: M .rubocop_todo.yml Log Message: ----------- [ci] Update rubocop check: Metrics/ModuleLength Commit: eecbe93afad38930cf7430e05cd17f154dd7e6aa https://github.com/openSUSE/open-build-service/commit/eecbe93afad38930cf7430... Author: Evan Rolfe <evanrolfe@gmail.com> Date: 2017-04-20 (Thu, 20 Apr 2017) Changed paths: M src/api/lib/authenticator.rb M src/api/spec/features/webui/login_spec.rb M src/api/spec/lib/authenticator_spec.rb M src/api/spec/requests/kerberos_login_spec.rb M src/api/spec/support/shared_contexts/a_kerberos_mock.rb Log Message: ----------- [ci] do not mock Authenticator class in kerberos request spec Commit: a8cc2ddf2b9183a3dbed10da2e284a42b2333a23 https://github.com/openSUSE/open-build-service/commit/a8cc2ddf2b9183a3dbed10... Author: Björn Geuken <bgeuken@suse.de> Date: 2017-04-20 (Thu, 20 Apr 2017) Changed paths: M src/api/lib/authenticator.rb M src/api/spec/features/webui/login_spec.rb M src/api/spec/lib/authenticator_spec.rb M src/api/spec/requests/kerberos_login_spec.rb M src/api/spec/support/shared_contexts/a_kerberos_mock.rb Log Message: ----------- Merge pull request #2 from evanrolfe/kerberos_webui_integration_spec [ci] do not mock Authenticator class in kerberos request spec Commit: 4761c2d86aedf7cf54cd95cafee96cb9a89b79aa https://github.com/openSUSE/open-build-service/commit/4761c2d86aedf7cf54cd95... Author: Björn Geuken <bgeuken@suse.de> Date: 2017-04-20 (Thu, 20 Apr 2017) Changed paths: M .rubocop_todo.yml M ReleaseNotes-2.9 M src/api/app/controllers/application_controller.rb M src/api/app/controllers/webui/user_controller.rb M src/api/app/controllers/webui/webui_controller.rb M src/api/app/helpers/webui/webui_helper.rb M src/api/app/models/user.rb M src/api/app/views/layouts/webui/_personal_navigation.html.erb M src/api/app/views/webui/user/login.html.haml M src/api/config/options.yml.example M src/api/lib/authenticator.rb A src/api/spec/cassettes/Login/in_kerberos_mode/for_a_normal_request_that_requires_login/and_Negotiate_header_is_not_set/informs_the_client_tool_browser_that_kerberos_authentication_is_required.yml A src/api/spec/cassettes/Login/in_kerberos_mode/for_a_normal_request_that_requires_login/and_Negotiate_header_is_not_set/informs_users_about_failed_kerberos_authentication_and_possible_cause.yml A src/api/spec/cassettes/Login/in_kerberos_mode/for_a_request_where_GSSAPI_raises_an_exception/does_not_authenticate_the_user.yml M src/api/spec/controllers/webui/user_controller_spec.rb M src/api/spec/features/webui/login_spec.rb A src/api/spec/lib/authenticator_spec.rb M src/api/spec/models/user_spec.rb M src/api/spec/requests/kerberos_login_spec.rb A src/api/spec/support/shared_contexts/a_kerberos_mock.rb Log Message: ----------- Merge pull request #2996 from bgeuken/kerberos_webui Kerberos authentication via webui and some minor improvements Compare: https://github.com/openSUSE/open-build-service/compare/09740e14a66e...4761c2...