jakedt
|
41cfadac23
|
Protect the search and repository list endpoints appropriately. Add more differentiating data to some need types. Remove the notification about password change from the user admin page. Select the dependent models for the visible repo list.
|
2014-03-25 17:26:45 -04:00 |
|
Joseph Schorr
|
efb1ab6562
|
Fix typo
|
2014-03-25 16:50:39 -04:00 |
|
jakedt
|
a9c0e016f3
|
Add the ability to use an oauth token to interact with the index and registry.
|
2014-03-20 12:09:25 -04:00 |
|
jakedt
|
0992c8a47e
|
Fix some permissions problems still around due to some usage of scopes as strings.
|
2014-03-19 18:21:58 -04:00 |
|
jakedt
|
3b7b12085d
|
User scope objects everywhere. Switch scope objects to namedtuples. Pass the user when validating whether the user has authorized such scopes in the past. Make sure we calculate the scope string using all user scopes form all previously granted tokens.
|
2014-03-19 18:09:09 -04:00 |
|
jakedt
|
f2d0a2f479
|
Split out organization repo roles and org management roles.
|
2014-03-19 14:36:56 -04:00 |
|
jakedt
|
6fc369bed2
|
Change non logged in 403s to 401s.
|
2014-03-19 13:57:36 -04:00 |
|
jakedt
|
19c7453f99
|
Merge branch 'swaggerlikeus' of ssh://bitbucket.org/yackob03/quay into swaggerlikeus
|
2014-03-18 19:21:53 -04:00 |
|
jakedt
|
64071b9e8e
|
Add a user info scope and thread it through the code. Protect the org modification API.
|
2014-03-18 19:21:27 -04:00 |
|
Joseph Schorr
|
d7a59ef0c2
|
Add checks for invalid scopes in the auth approval process
|
2014-03-18 17:05:27 -04:00 |
|
Joseph Schorr
|
9ae4506a0d
|
Add OAuth usage information the API logs, have it be displayed in the logs UI and start on the code to display application information when clicked. Note that this does not (yet) do anything with the information returned as we need to wait for the mainline merge of Angular 1.2.9 (which is in master) before I can continue on the display
|
2014-03-18 16:45:18 -04:00 |
|
jakedt
|
1ae04658ef
|
Fix the formats for some errors.
|
2014-03-17 14:38:50 -04:00 |
|
jakedt
|
5bb4008880
|
Fix cookie auth to work with oauth token auth. Make sure user loading is truly deferred to save DB connections.
|
2014-03-17 12:01:13 -04:00 |
|
Joseph Schorr
|
d469b41899
|
Add an oauth authorization page
|
2014-03-14 18:57:28 -04:00 |
|
jakedt
|
0e3fe8f3b1
|
Port a few more repository methods to the new API interface.
|
2014-03-12 20:33:57 -04:00 |
|
jakedt
|
e74eb3ee87
|
Add scope ordinality and translations. Process oauth tokens and limit scopes accordingly.
|
2014-03-12 16:31:37 -04:00 |
|
jakedt
|
25ceb90fc6
|
Add some sort of oauth.
|
2014-03-12 12:37:06 -04:00 |
|
Joseph Schorr
|
61ca29de04
|
Move the auth context methods into their own file so that we don't have auth trying to import itself
|
2014-02-25 15:07:24 -05:00 |
|
Joseph Schorr
|
a120f6c64a
|
Make sure all aborts have message information
|
2014-02-25 14:15:12 -05:00 |
|
yackob03
|
8c1142a770
|
We weren't properly handling passwords with a colon in them.
|
2014-02-09 23:59:30 -05:00 |
|
yackob03
|
56722d1ac1
|
Allow a request with invalid basic auth to still be considered anonymous, rather than throwing a 401.
|
2013-12-19 15:18:14 -05:00 |
|
root
|
61618c7eab
|
We can't count on auth tokens being sent anymore, so we set the namespace and repository for the session when the original put on the repo is made.
|
2013-12-09 04:24:29 +00:00 |
|
yackob03
|
e69591c7d6
|
Add the ability to login with a robot, use the wrench icon for robots all over the place.
|
2013-11-20 19:43:19 -05:00 |
|
yackob03
|
d064af2800
|
Fix a bug where org admin was not sufficient for the modify repository permission.
|
2013-11-07 12:52:46 -05:00 |
|
yackob03
|
d14a292896
|
Org admins should be able to view all teams.
|
2013-11-04 16:44:38 -05:00 |
|
yackob03
|
f8d3c95b74
|
Fix a typo in the team need permissions.
|
2013-11-04 16:39:52 -05:00 |
|
yackob03
|
2eb7ff2442
|
Add a bunch of the missing permissions from the API.
|
2013-11-04 16:18:40 -05:00 |
|
yackob03
|
dd77ebd64f
|
Next batch of backend permissions for orgs.
|
2013-11-04 15:42:08 -05:00 |
|
yackob03
|
283f9b81ae
|
First stab at token auth. The UI could use a little bit of polishing.
|
2013-10-16 14:24:10 -04:00 |
|
yackob03
|
959016a6eb
|
Remove unnecessary calls to the database for user and permission metadata.
|
2013-10-15 14:48:49 -04:00 |
|
yackob03
|
891f992bf2
|
Allow for anonymous access tokens for public repositories.
|
2013-10-01 01:18:05 -04:00 |
|
yackob03
|
0652636693
|
Handle the case where there is no auth at all.
|
2013-10-01 00:37:28 -04:00 |
|
yackob03
|
6bcb5cfcaa
|
Flesh out some permissions APIs.
|
2013-09-27 13:24:07 -04:00 |
|
yackob03
|
9278871381
|
Load flask principal permissions even for web and api endpoints.
|
2013-09-26 16:32:09 -04:00 |
|
yackob03
|
23cbcb2979
|
Make images belong to one repository only. Add a description field to the repository. Fix a bug with access tokens. Fix an embarrasing bug with multiple select criteria in peewee. Update the test db.
|
2013-09-26 15:58:11 -04:00 |
|
yackob03
|
44255421df
|
Namespace the storage in the registry to prevent leaking images if one acquires the image id.
|
2013-09-25 20:00:22 -04:00 |
|
yackob03
|
08446ef59e
|
Fix some stuff with logins and permissions, add tags to the mode.
|
2013-09-25 16:46:28 -04:00 |
|
yackob03
|
ee5ea51532
|
Refactor the code into modules, it was getting unweildy.
|
2013-09-25 12:45:12 -04:00 |
|