Commit graph

1648 commits

Author SHA1 Message Date
Joseph Schorr
188ea98441 Add new decorator to prevent reflected text attacks
Instead of disabling repo names with periods in them, we simply disallow calls to the API when they are GET requests, whose path ends in a dot, and that do not have a referrer from the frontend.
2018-02-20 11:33:45 -05:00
Joseph Schorr
72ca758c88 Add messaging when trying to create a team that already exists
Fixes https://jira.coreos.com/browse/QUAY-827
2018-02-15 16:03:09 -05:00
Joseph Schorr
de47b13c24 Add superuser config for Azure blob storage 2018-02-06 13:48:40 -05:00
josephschorr
6514bf229f
Merge pull request #2973 from coreos-inc/joseph.schorr/QS-116/cloudfront-storage
Add support for configuring cloudfront storage
2018-02-02 10:14:28 -05:00
Joseph Schorr
1b707660de Hide build-related UI elements when builds are disabled
Fixes https://jira.coreos.com/browse/QUAY-807
2018-01-31 18:09:38 -05:00
Joseph Schorr
b0f656731c Add support for configuring CloudFront storage engine
Fixes https://jira.coreos.com/browse/QS-116
2018-01-31 11:22:14 -05:00
Joseph Schorr
8714ad6fe3 Fix NPE when app specific tokens are not enabled 2018-01-26 13:18:32 -05:00
Joseph Schorr
f726e8c972 Fix typo in expiration status view
Fixes https://jira.coreos.com/browse/QS-119
2018-01-11 17:29:48 -05:00
Joseph Schorr
888b564a9b Add a banner to the Quay UI when an app specific token is about to expire 2018-01-04 15:27:42 -05:00
Joseph Schorr
524d77f527 Add an AppSpecificAuthToken data model for app-specific auth tokens. These will be used for the Docker CLI in place of username+password 2018-01-04 15:27:41 -05:00
Joseph Schorr
c9fd579b06 Remove single bind on time-ago component
The component is occasionally used for date times that change, so we cannot single bind

Fixes https://jira.coreos.com/browse/QS-104
2018-01-04 11:17:44 -05:00
Joseph Schorr
72bfebdb60 Add license validation to the config validation check
Should prevent a customer from accidentally saving a config that violates their license

Fixes https://jira.coreos.com/browse/QS-97
2017-12-19 13:44:08 -05:00
Joseph Schorr
0a176d0abe Fix plans manager display to be less confusing when we show deprecated plans 2017-12-18 11:45:15 -05:00
Joseph Schorr
a2caebbb62 Fix XSS in usage log viewer
Fixes https://jira.coreos.com/browse/QS-82
2017-12-06 13:49:02 -05:00
Joseph Schorr
4db1615d94 Fix bugs in updateuser
1) Also check for matching organization names
2) Ensure that errors don't leave the throbber
2017-12-01 14:58:29 -05:00
Joseph Schorr
49dff5729c Switch time display components to use locale-aware format strings 2017-11-27 16:03:54 +02:00
Joseph Schorr
db53f82a34 Shorten the default date/times shown 2017-11-27 13:19:26 +02:00
Joseph Schorr
b5b4aa154c Add support for date-only to the time-display component 2017-11-27 13:08:38 +02:00
Joseph Schorr
7d55ff9c67 Add a <time-display> component for better display of time 2017-11-27 12:56:06 +02:00
Joseph Schorr
2ea06d3df8 Change all uses of am-time-ago to the <time-ago> component 2017-11-27 12:41:19 +02:00
Joseph Schorr
33af54d355 Add a <time-ago> component to abstract out common handling of showing how long ago an event occurred 2017-11-27 12:40:58 +02:00
Joseph Schorr
b9768ef6cf Remove unused component 2017-11-27 12:40:08 +02:00
Joseph Schorr
0217ef34ea Trim Dockerfile commands to fix UI
Docker is (for some reason) adding an extra space, so trim the command before parsing

Fixes https://jira.prod.coreos.systems/browse/QS-57
2017-11-10 13:29:55 -05:00
Joseph Schorr
091b937ee3 Fix handling of promises for title and description of pages in Quay
We were not correctly waiting for the `scope` on page to be filled before trying to calculate the title, and the logic for description was broken as well.
2017-11-08 16:14:14 -05:00
Joseph Schorr
703a64cd6a Add pull by digest to the fetch tag dialog 2017-10-25 15:02:39 -04:00
Joseph Schorr
86e4539c04 Add ability to copy the full SHA256 or V1ID for an image
Clicking the little (SHA256) or (V1ID) bubble next to the ID will now show a dialog with a copy box.
2017-10-25 14:56:59 -04:00
Joseph Schorr
f4433920c1 Fix bug in reading the updated_tags on a notification
It is no longer an Object, but an array
2017-10-24 15:24:33 -04:00
Joseph Schorr
1d593274dc Fix build links in notifications
Fixes https://jira.prod.coreos.systems/browse/QS-33
2017-10-20 14:03:51 -04:00
Joseph Schorr
8081b8424f Further NPE fix in tag signing display
Fixes https://jira.prod.coreos.systems/browse/QS-37
2017-10-17 13:13:19 -04:00
Joseph Schorr
ff3dac613a Fix bug in entity search that caused all robots and teams to be non-lazy loaded
Should help immensely with repository page load time

Fixes https://coreosdev.atlassian.net/browse/QS-30
2017-10-09 15:44:46 -04:00
Joseph Schorr
a7f02c5451 Handle NPE in tag signing display 2017-10-09 14:07:16 -04:00
Joseph Schorr
38748576a1 Fix NPE in updateuser code
Fixes https://sentry.io/coreos/frontend-production/issues/364782088/
2017-10-09 14:02:36 -04:00
Joseph Schorr
3b4296f580 Add missing var 2017-10-06 14:36:02 -04:00
josephschorr
3bef21253d Merge pull request #2695 from coreos-inc/oidc-internal-auth
OIDC internal auth support
2017-10-02 16:51:17 -04:00
Joseph Schorr
82ff85b125 Add ability for users to change their name and company information 2017-09-26 16:58:04 -04:00
Alec Merdler
ad61df66c5 Merge pull request #2846 from alecmerdler/QUAY-682
Optimize Webpack JS Bundle Size
2017-09-18 16:47:30 -04:00
Joseph Schorr
9a4c87795f Fix contacts setup in superuser panel
Adds a missing import
2017-09-14 15:40:11 -04:00
Joseph Schorr
ed897c7cb0 Change OIDC engine to not be federated
We don't need linking, just the ability to perform lookup
2017-09-12 12:26:41 -04:00
Joseph Schorr
bc82edb2d1 Add ability to configure OIDC internal auth engine via superuser panel 2017-09-12 12:23:52 -04:00
Joseph Schorr
e724125459 Add support for using OIDC tokens via the Docker CLI 2017-09-12 12:23:22 -04:00
Joseph Schorr
650dbe5f5b Add config to enable "public" namespaces
These are namespaces that will be displayed in the repo list view, regardless of whether the user is a member.
2017-08-07 15:59:06 -04:00
Joseph Schorr
dff4207a89 Add feature flag to enable viewing builds and build logs for public repos 2017-08-07 15:24:36 -04:00
Alec Merdler
6dae6c4f82 whitelisted moment.js locales to reduce bundle size 2017-08-02 15:46:14 -04:00
Alec Merdler
82a08a942e removed Rickshaw dependency used by dead code 2017-08-02 10:27:44 -04:00
Alec Merdler
41c12c853c use Webpack code-splitting to dynamically import Highlight.js languages as they are detected by Showdown Markdown extension 2017-08-01 15:36:54 -04:00
Alec Merdler
8dc2a99926 refactored Markdown components to reduce bundle size 2017-08-01 10:55:05 -04:00
Alec Merdler
25f514a03d fixed status bar not showing 2017-07-26 11:24:12 -04:00
Alec Merdler
b11a51b62e fixed overflowing release name in application view 2017-07-20 11:23:52 -04:00
josephschorr
a6db05e8b5 Merge pull request #2718 from coreos-inc/tag-expiration
Formal tag expiration support
2017-07-19 17:48:11 -04:00
josephschorr
b8e5a21736 Merge pull request #2663 from coreos-inc/multi-instance-su-panel
Disable debug logs in superuser panel when under multiple instances
2017-07-19 17:28:05 -04:00