17 Commits

Author SHA1 Message Date
Filip Troníček
da1053e101
Make auth cookie stricter (#19973)
* Use `__Host-` prefix for cookie

* Fix tests

* Remove domain from cookie

* Fix logout

* remove unused fn

* fix user logout properly

* [server] Make domain-only cookie work for GitHub oauth login

... by adding additional step so we can set the cookie for the base domain only

* test: fix by redirecting before callbacl/authorize

* [server] SessionHandler: Allow to login with both primary and secondary cookies

* [server] Clear 2ndary cookie on logout

* Fix filtering cookie values when primary cookie is empty

* Fix logouts

* Fix tests

---------

Co-authored-by: Gero Posmyk-Leinemann <gero@gitpod.io>
2024-07-01 08:53:14 +02:00
Milan Pavlik
f09c35a02d
[installer] Change cookie name (#18958)
* [installer] Change cookie name

* fix test

* fix
2023-10-19 17:35:28 +03:00
Milan Pavlik
6328d8f602
[server] Setup redis mutex to replace leader election (#17369)
* [server] Setup redis mutex to replace leader election

* injectable

* fix

* fix

* fix
2023-04-26 02:16:46 +08:00
Milan Pavlik
233ec9457a
[installer] Add JWT cookie opts to config WEB-101 (#17332)
* retest

* retest

* [installer] Add cookie name to config

* Fix

* fix
2023-04-24 17:46:45 +08:00
Milan Pavlik
b57424a76f
[jwt] Installer configures expiry & issuer WEB-102 (#17314)
* [jwt] Installer configures expiry & issuer

* Fix

* Fix

* retest

* Fix

* Fix

* Fix
2023-04-24 17:07:45 +08:00
Milan Pavlik
0bf91e58fd
[installer] Add key id for each auth keypair - WEB-100 (#17219)
* [installer] Add key id for each auth keypair

* retest

* fix

* fix
2023-04-17 18:41:49 +08:00
Milan Pavlik
c8f22f7ce8
[server] Load auth-pki into server config (#17214) 2023-04-14 13:54:53 +02:00
Christian Weichel
478a75e744 Switch license to AGPL 2022-12-08 13:05:19 -03:00
Manuel Alejandro de Brito Fontes
64b4d6fcf9 Fix typecheck errors 2022-08-23 08:18:39 +02:00
Nandaja Varma
ec2f934ad3 [installer] move workspaceImage out of experimental config 2022-07-27 04:40:21 -03:00
Gero Posmyk-Leinemann
c305aa4a41 [server] Remove blockedRepositories config 2022-07-20 09:05:15 -03:00
Andrew Farries
539414d0e4 Ensure that blocked repo string is a valid regexp 2022-05-10 14:07:25 +05:30
Andrew Farries
1ae1ce97bf Add test for blocked repository config 2022-05-10 14:07:25 +05:30
Andrew Farries
57ce815dd8 Add a test for ws garbage collection
Add it to the existing configmap test.
2022-05-10 12:38:25 +05:30
Andrew Farries
9b1f309f72 Ensure enableLocalApp defaults to true when unset 2022-05-04 18:16:20 +05:30
Andrew Farries
0eac574ece Make runDbDeleter configurable
Take the value from the experimental server config rather than
hardcoding to `true`.
2022-05-04 18:16:20 +05:30
Andrew Farries
857f98c8c1 Add tests for server configmap logic
Extract named structs for fields that were nested under `ServerConfig`
so that they can be instantiated in tests.
2022-04-29 19:18:15 +05:30