This repository has been archived on 2020-03-24. You can view files and clone it, but cannot push or open issues or pull requests.
quay/endpoints/api
Joseph Schorr 2c35383724 Allow OAuth and OIDC login engines to bind to fields in internal auth
This feature is subtle but very important: Currently, when a user logs in via an "external" auth system (such as Github), they are either logged into an existing bound account or a new account is created for them in the database. While this normally works jut fine, it hits a roadblock when the *internal* auth system configured is not the database, but instead something like LDAP. In that case, *most* Enterprise customers will prefer that logging in via external auth (like OIDC) will also *automatically* bind the newly created account to the backing *internal* auth account. For example, login via PingFederate OIDC (backed by LDAP) should also bind the new QE account to the associated LDAP account, via either username or email. This change allows for this binding field to be specified, and thereafter will perform the proper lookups and bindings.
2017-02-16 16:27:53 -05:00
..
test Allow OAuth and OIDC login engines to bind to fields in internal auth 2017-02-16 16:27:53 -05:00
__init__.py Have Quay always use an OAuth-specific CSRF token 2016-12-08 16:11:57 -05:00
billing.py Use new error format for auth errors (factor exceptions into module) 2016-04-11 16:22:26 -04:00
build.py feature(superuser panel): ability to view logs 2017-01-26 13:54:03 -05:00
discovery.py Add a test for operation name collisions and fix the one additional collision found 2016-11-10 15:38:27 -05:00
error.py Fix formatting in endpoints/api/error.py 2016-04-12 16:53:50 -04:00
globalmessages.py Severity and Markdown support in MOTD 2017-01-18 16:55:32 -05:00
image.py Add a helper method to Image to parse ancestor string. 2016-09-07 10:48:58 -04:00
logs.py Log more information to the action logs and display the namespaces for superusers 2017-02-14 14:55:24 -05:00
manifest.py Log more information to the action logs and display the namespaces for superusers 2017-02-14 14:55:24 -05:00
organization.py fix(endpoints/api): return empty 204 resp 2016-12-14 16:22:39 -05:00
permission.py Log more information to the action logs and display the namespaces for superusers 2017-02-14 14:55:24 -05:00
prototype.py fix(endpoints/api): return empty 204 resp 2016-12-14 16:22:39 -05:00
repoemail.py Use new error format for auth errors (factor exceptions into module) 2016-04-11 16:22:26 -04:00
repository.py Log more information to the action logs and display the namespaces for superusers 2017-02-14 14:55:24 -05:00
repositorynotification.py Log more information to the action logs and display the namespaces for superusers 2017-02-14 14:55:24 -05:00
repotoken.py fix(endpoints/api): return empty 204 resp 2016-12-14 16:22:39 -05:00
robot.py fix(endpoints/api): return empty 204 resp 2016-12-14 16:22:39 -05:00
search.py Fix external auth returns for query_user calls 2016-12-07 14:28:42 -05:00
secscan.py Add API endpoint for retrieving security status by *manifest*, rather than Docker V1 image ID 2017-02-02 17:51:18 -05:00
subscribe.py Use new error format for auth errors (factor exceptions into module) 2016-04-11 16:22:26 -04:00
suconfig.py Superuser config tool warnings 2017-01-13 15:50:50 -05:00
superuser.py feature(superuser panel): ability to view logs 2017-01-26 13:54:03 -05:00
tag.py Log more information to the action logs and display the namespaces for superusers 2017-02-14 14:55:24 -05:00
team.py fix(endpoints/api): return empty 204 resp 2016-12-14 16:22:39 -05:00
trigger.py add rate limiting to build queues 2016-12-06 16:30:12 -05:00
user.py Have external login always make an API request to get the authorization URL 2017-01-23 19:06:19 -05:00