summaryrefslogtreecommitdiffstats
path: root/api4/oauth.go
Commit message (Collapse)AuthorAgeFilesLines
* MM-11520: Make entity ID checks consistent across api4. (#9395)George Goldberg2018-09-141-0/+6
| | | | | | * MM-11520: Make entity ID checks consistent across api4. * Update tests.
* MM-10573 Add error page if user doesn't authorize Mattermost for OAuth (#9402)Harrison Healey2018-09-141-0/+9
|
* Migrate all the api4 to handle errors in idiomatic way (#9143)Jesús Espino2018-08-011-11/+14
|
* Add OAuth2 login hint for SAML (#9194)Joram Wilander2018-07-311-1/+7
|
* Implement OAuth2 implicit grant flow (#9178)Joram Wilander2018-07-271-2/+7
|
* MM-10370: serve subpath (#8968)Jesse Hallam2018-06-211-9/+9
| | | | | | | | | | | | | | | | | | | | | | | * factor out GetSubpathFromConfig * mv web/subpath.go to utils/subpath.go * serve up web, api and ws on /subpath if configured * pass config to utils.RenderWeb(App)?Error This allows the methods to extract the configured subpath and redirect to the appropriate `/subpath/error` handler. * ensure GetSubpathFromConfig returns trailing slashes deterministically * fix error 404 handling * redirect /subpath to /subpath/ This is necessary for the static handler to match, otherwise none of the registered routes find anything. This also makes it no longer necessary to add trailing slashes in the root router.
* MM-10640 Set EnableUserCreation to true by default (#8815)Balasankar C2018-05-181-1/+1
| | | | | | | | | | | | | | * Set EnableUserCreation to true by default * Fix argument type to FormatBool * Convert EnableUserCreation instances to pointer * Convert to boolean in tests also * Set value of pointer to be false * Convert remaining EnableUserCreation instances to pointer
* Structured logging (#8673)Christopher Speller2018-04-271-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Implementing structured logging * Changes to en.json to allow refactor to run. * Fixing global logger * Structured logger initalization. * Add caller. * Do some log redirection. * Auto refactor * Cleaning up l4g reference and removing dependancy. * Removing junk. * Copyright headers. * Fixing tests * Revert "Changes to en.json to allow refactor to run." This reverts commit fd8249e99bcad0231e6ea65cd77c32aae9a54026. * Fixing some auto refactor strangeness and typo. * Making keys more human readable.
* Fix various segfaults when running `go test` manually (#8448)Jesse Hallam2018-03-211-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | * failing to find i18n shouldn't segfault The server was trying to handle the fact that it couldn't find the i18n directory, by emitting a translated log message... * fix utils.FindDir The attempts to find the directory in the parent or grandparent directory don't work if the current working directory was inside `enterprise`, with `enterprise` itself being a symlink as per the usual developer setup. Recurse to the root of the filesystem, cleaning the path along the way to work around this limitation (and allow tests to be run from an arbitrarily deep nesting level.) Fix corresponding usages to employ filepath.Join. * failing to find html templates shouldn't segfault * fail fast if the test user cannot be created * rework utils.FindDir to retain backwards compatibility
* ABC-132: sign error page parameters (#8197)Chris2018-02-071-9/+15
| | | | | | * sign error page parameters * add comments
* redirect error uri when OAuth SSO is setup but account creation is disabled ↵Saturnino Abril2018-01-111-1/+1
| | | | (#8086)
* Reduce logging data races, fix MySQL test race condition (#7994)Chris2017-12-221-2/+0
| | | | | | | | * fix races * revert unintentional change * fix test as intended
* Fix oauth app update (#7913)Joram Wilander2017-12-011-1/+1
|
* Performance improvements for 40M posts (#7708)Christopher Speller2017-10-251-14/+14
| | | | | | | | | | | | | | | | | | | | | | * Optimizing get root posts SQL query * Setting session invalidation to be reliable * Adding app reciever to SessionHasPermissionToUser * Adding app reciever to SessionHasPermissionToTeam * Adding app reciever to SessionHasPermissionTo * Clear session cache if permission was denied * Fixing rebase issues * Revert "Optimizing get root posts SQL query" This reverts commit f364757e7015cfb4ec673d0a4fc3d57cd25d8dd7. * Fixing build
* Reduce utils.Cfg references (#7650)Chris2017-10-181-2/+2
| | | | | | | | | | | | * app.UpdateConfig method * test fix * another test fix * the config override option as-was is just error prone, remove it for now * derp
* remove global refs from api/api4 (#7496)Chris2017-09-221-20/+20
|
* fix error message escaping (#7467)Chris2017-09-201-2/+2
|
* Implement update OAuthApp endpoint for APIv4, add test (#7413)n1aba2017-09-181-0/+42
|
* Renaming repoChristopher Speller2017-09-061-3/+3
|
* Merge release-4.2Christopher Speller2017-09-061-0/+9
|\
| * Various patchesJoramWilander2017-09-061-0/+9
| |
* | app type transition (#7167)Chris2017-09-061-25/+25
|/
* PLT-7468 Moved more error pages to use predefined error types (#7378)Harrison Healey2017-09-051-3/+1
| | | | | | | | * PLT-7468 Moved more errors to use error types * PLT-7468 Moved 404 error page to use error types * Made helper function for rendering external links on error page
* Set charset for OAuth2 authorize page (#7304)Joram Wilander2017-08-281-1/+1
|
* If login is using mobile respond with JSON object (#7030)enahum2017-08-031-4/+20
|
* Redirect OAuth SSO errors to error page (#6898)Joram Wilander2017-07-111-3/+9
|
* Minor fixJoramWilander2017-07-061-4/+4
|
* PLT-6471 Properly panic when translations can't be loaded (#6414)Harrison Healey2017-05-231-1/+3
| | | | | | | | | | * PLT-6471 Properly panic when translations can't be loaded * Print usage messages when errors occur during CLI initialization * Reverted behaviour of FindDir and added second return value to it * Fixed merge conflict
* Ability to use OAuth login from mobile (#6432)enahum2017-05-171-5/+28
|
* Fix OAuth SSO first account creation, add mobile support, and fix refresh ↵Joram Wilander2017-04-251-0/+3
| | | | tokens (#6181)
* Implement v4 endpoints for OAuth (#6040)Joram Wilander2017-04-201-0/+481
* Implement POST /oauth/apps endpoint for APIv4 * Implement GET /oauth/apps endpoint for APIv4 * Implement GET /oauth/apps/{app_id} and /oauth/apps/{app_id}/info endpoints for APIv4 * Refactor API version independent oauth endpoints * Implement DELETE /oauth/apps/{app_id} endpoint for APIv4 * Implement /oauth/apps/{app_id}/regen_secret endpoint for APIv4 * Implement GET /user/{user_id}/oauth/apps/authorized endpoint for APIv4 * Implement POST /oauth/deauthorize endpoint