Skip to content
Snippets Groups Projects
  1. Jul 15, 2022
  2. Jul 14, 2022
  3. Jul 13, 2022
    • Stan Hu's avatar
      Properly fail LDAP logins if GitLab user not persisted · 811f5cc1
      Stan Hu authored and Mayra Cabrera's avatar Mayra Cabrera committed
      Previously if restricted e-mail domains
      (#366269) or password
      limit restrictions were set
      (#22399), newly-signed in
      LDAP users would see an obscure failure message:
      
      ```
      Could not authenticate you from Ldapmain because "Undefined method
      `provider' for nil:nilclass".
      ```
      
      This was failing in `Gitlab::Auth::Ldap::Access.open` because
      `user.ldap_identity` was `nil`. The application settings would cause
      validations of newly-signed in LDAP users to fail, preventing the user
      from persisting to the database.
      
      The OmniAuth callback controller attempted to detect this by calling
      `auth_user.valid_sign_in?`, but this was failing because
      `Gitlab::Auth::LdapUser#valid_sign_in?` did not properly check that
      the user entry was persisted to the database before it contacted the
      LDAP server.
      
      To avoid this obscure error, we just need to swap the order of the
      check: if the user entry is valid and persisted, then we can safely
      contact the LDAP server. If the user entry is not valid, an "Access
      Denied for your LDAP account" message will be shown to the user, and a
      message in the application log will list the reason why it failed.
      
      Changelog: fixed
      811f5cc1
    • Harsimar Sandhu's avatar
      Event type information for ci variable audit event · a7229916
      Harsimar Sandhu authored and James Fargher's avatar James Fargher committed
      EE: true
      Changelog: added
      a7229916
    • Florie Guibert's avatar
      Improve alert UX when updating existing design · 93dee887
      Florie Guibert authored
      Changelog: changed
      93dee887
    • Markus Koller's avatar
      Refactor more integrations to use the DSL (2/2) · 4bf20e44
      Markus Koller authored
      - Campfire
      - Datadog
      - Irker
      - Packagist
      - Pushover
      - Shimo
      - Youtrack
      - Zentao
      
      Epic: gitlab-org&7652
      4bf20e44
Loading