summaryrefslogtreecommitdiffstats
path: root/app/oauth.go
Commit message (Collapse)AuthorAgeFilesLines
* MM-11855 Add App.HTTPService to allow mocking of HTTP client (#9359)Harrison Healey2018-09-071-2/+2
| | | | | | * MM-11855 Add App.HTTPService to allow mocking of HTTP client * Initialize HTTPService earlier
* CSRF Token Implementation for Plugins (#9192)Daniel Schalla2018-08-011-0/+1
| | | | | | | | | | | | | | | | | deleted test config fix test config Dont wipe the session token for plugins Simplified Tokens; Generate CSRF for other sessions Remove CSRF from Access Token; Remove Getter/Setter from Context fix removed setter remove getcsrf helper from plugin api enforce csrf only for cookie auth
* Save OAuth access token to DB for consistency with other flows (#9190)Joram Wilander2018-07-311-0/+7
|
* Implement OAuth2 implicit grant flow (#9178)Joram Wilander2018-07-271-7/+66
|
* Simplify oauth (#8972)Emil Velikov2018-06-261-1/+7
| | | | | | | | | | | | | | | | * Remove unused OauthProvider::GetIdentifier Signed-off-by: Emil Velikov <emil.velikov@collabora.com> * Reuse gitlab's getAuthData() instead of open-coding it Signed-off-by: Emil Velikov <emil.velikov@collabora.com> * Remove OauthProvider::GetAuthDataFromJson interface The data is already available via GetUserFromJson().AuthData Signed-off-by: Emil Velikov <emil.velikov@collabora.com>
* Add more oauth logging and note about GitLab ToS for login (#8949)Joram Wilander2018-06-141-1/+14
|
* Structured logging (#8673)Christopher Speller2018-04-271-5/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Implementing structured logging * Changes to en.json to allow refactor to run. * Fixing global logger * Structured logger initalization. * Add caller. * Do some log redirection. * Auto refactor * Cleaning up l4g reference and removing dependancy. * Removing junk. * Copyright headers. * Fixing tests * Revert "Changes to en.json to allow refactor to run." This reverts commit fd8249e99bcad0231e6ea65cd77c32aae9a54026. * Fixing some auto refactor strangeness and typo. * Making keys more human readable.
* Fall back to constructured URL for OAuth SSO if SiteURL not set (#8352)Joram Wilander2018-02-231-1/+6
|
* Remove global site url (#8343)Chris2018-02-221-4/+4
| | | | | | | | * remove global site url * missed one * revert mysterious change
* add App.License, remove utils.IsLicensed / utils.License calls (#8203)Chris2018-02-061-2/+2
|
* ABC-153: don't use http redirects with 4xx/5xx status codes (#8178)Chris2018-02-021-1/+1
| | | | | | * don't use http redirects with 4xx/5xx status codes * minor html syntax fix
* Add Config to disable Auth Transfers. (#7843)Chris Duarte2017-11-281-0/+8
| | | | | | * Add Config to disable Auth Transfers. * Set config ExperimentalEnableAuthenticationTransfer behind an E20 license restriction
* HTTP client refactor (#7884)Chris2017-11-221-2/+2
| | | | | | * http client refactor * simplification
* Fixing URL encoding of SAML email address when switching to SAML account (#7733)Christopher Speller2017-10-311-1/+1
|
* Remove more global refs / state (#7723)Chris2017-10-261-1/+1
| | | | | | | | | | * remove more global refs / state * fix job enterprise initialization * fix api4 test compilation * saml api endpoints fix
* eliminate more utils.Cfg references (#7701)Chris2017-10-241-2/+2
|
* Reduce utils.Cfg references (#7650)Chris2017-10-181-16/+16
| | | | | | | | | | | | * app.UpdateConfig method * test fix * another test fix * the config override option as-was is just error prone, remove it for now * derp
* Add back consumeAndClose functionality. (#7608)Christopher Speller2017-10-121-1/+1
| | | | | | | * consume bodies for action button integrations, webrtc gateway, oauth endpoint * Fixing a couple more places, switching to io.Copy to ioutil.Discard, adding a comment to help prevent future performance regressions
* Miscellaneous app cleanup (#7594)Chris2017-10-091-9/+3
| | | | | | | | | | | | * app cleanup * whoops, forgot a file * some minor cleanup * longer container deadline * defensive checks
* PLT-7782 Fix for OAuth (#7566)Joram Wilander2017-10-041-6/+1
| | | | | | * Fix for oauth * Fix test
* Goroutine wranglin (#7556)Chris2017-10-031-4/+4
| | | | | | * goroutine wranglin * synchronize WebConn.WritePump
* remove einterface gets (#7455)Chris2017-09-191-1/+1
|
* Implement update OAuthApp endpoint for APIv4, add test (#7413)n1aba2017-09-181-0/+17
|
* Renaming repoChristopher Speller2017-09-061-4/+4
|
* app type transition (#7167)Chris2017-09-061-85/+85
|
* App: NewLocAppError -> NewAppError (#7327)George Goldberg2017-09-011-11/+10
| | | | | | * App: NewLocAppError -> NewAppError * Remove statuscode that got missed.
* Merge branch 'release-4.1'Christopher Speller2017-08-171-3/+3
|\
| * Merge 4.0.3 into release-4.1 (#7169)Saturnino Abril2017-08-111-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix dm custom slash command regression (#7008) * point mattermost-redux to webapp-4.0 latest (#7040) * If login is using mobile respond with JSON object (#7030) * Allow regions to be set and honored for S3 driver. (#7010) (#7073) This is necessary for certain users where GetBucketLocation API is disabled using IAM policies. There is a field AmazonS3Region which we need to re-purpose and use to support this properly. Fixes https://github.com/mattermost/platform/issues/6999 * [PLT-7231/PLT-7306] Fix GitLab SSO failure with non-English locale and make config locales more forgiving (#7106) * make config locales more forgiving by assigning default values * fix error text * update per comment * Minor updates to team * Another team update
* | PLT-6358: Server HTTP client improvements (#6980)Chris2017-08-091-2/+2
|/ | | | | | | | | | | | | | | | * restrict untrusted, internal http connections by default * command test fix * more test fixes * change setting from toggle to whitelist * requested ui changes * add isdefault diagnostic * fix tests
* If login is using mobile respond with JSON object (#7030)enahum2017-08-031-6/+6
|
* Add more debugging info to server logs for failed OAuth requests (#7039)Joram Wilander2017-08-021-4/+7
|
* Minor fixJoramWilander2017-07-121-0/+2
|
* Minor fixJoramWilander2017-07-061-11/+100
|
* PLT-5705 Created a single source of http.Client creation logic with internet ↵Torsten Juergeleit2017-05-311-11/+3
| | | | proxy support, reasonable timeouts and optional insecure connections (#6503)
* Ability to use OAuth login from mobile (#6432)enahum2017-05-171-2/+2
|
* Creating common token store and moving email invites and verification to it ↵Christopher Speller2017-04-271-4/+4
| | | | (#6213)
* Fix OAuth SSO first account creation, add mobile support, and fix refresh ↵Joram Wilander2017-04-251-6/+9
| | | | tokens (#6181)
* Implement v4 endpoints for OAuth (#6040)Joram Wilander2017-04-201-14/+14
| | | | | | | | | | | | | | | | | | * Implement POST /oauth/apps endpoint for APIv4 * Implement GET /oauth/apps endpoint for APIv4 * Implement GET /oauth/apps/{app_id} and /oauth/apps/{app_id}/info endpoints for APIv4 * Refactor API version independent oauth endpoints * Implement DELETE /oauth/apps/{app_id} endpoint for APIv4 * Implement /oauth/apps/{app_id}/regen_secret endpoint for APIv4 * Implement GET /user/{user_id}/oauth/apps/authorized endpoint for APIv4 * Implement POST /oauth/deauthorize endpoint
* Refactor OAuth 2.0 code into app layer (#6037)Joram Wilander2017-04-121-1/+476
|
* PLT-5860 Updated copyright date (#6058)Harrison Healey2017-04-121-1/+1
| | | | | | | | | | | | * PLT-5860 Updated copyright date in about modal * PLT-5860 Updated copyright notice in JSX files * PLT-5860 Updated copyright notice in go files * Fixed misc copyright dates * Fixed component snapshots
* Refactor switching login type code into app layer and add v4 endpoint (#6000)Joram Wilander2017-04-101-1/+171
| | | | | | * Refactor switching login type code into app layer and add v4 endpoint * Fix unit test
* Migrate functions to app package (#5106)Joram Wilander2017-01-191-1/+1
| | | | | | | | | | | | | | | | | | * Refactor and move session logic into app package * Refactor email functions into the app package * Refactor password update into app package * Migrate user functions to app package * Move team functions into app package * Migrate channel functions into app package * Pass SiteURL through to app functions * Update based on feedback
* Refactor and migrate more functions out of api into app package (#5063)Joram Wilander2017-01-131-0/+34
generated by cgit v1.2.3-1-g7c22 (git 2.25.1) at 2024-05-02 10:05:12 +0000