Make GitLab pages support access control
Pages access control
This change adds support for access controlled pages by configuration provided from GitLab to the
config.json. When project is not public and access control is enabled for it, pages will require user to authenticate. This is done by redirecting user to GitLab authorize endpoint. If project visiblity is public, then access will not be checked.
Pages will store the access token in a session cookie. When access token is invalid the authentication will be done again.
- New fields in the
- Auth package for handling OAuth and checking access to a project when necessary
- Test for auth and also acceptance tests
This can be tested by creating the authentication id and secret manually.
All feedback is appreciated!