1187 Commits

Author SHA1 Message Date
Christian Weichel
ab00cd07be [admin] Introduce audit logs for admin API calls 2021-02-11 11:11:38 +01:00
Cornelius A. Ludmann
55564b66cf [server] Add API rate limiter and API Prometheus metrics 2021-02-10 18:12:39 +01:00
Gero Posmyk-Leinemann
e42f7c8dec
[server-ee] Fix wrong injection of GitHupApp (#3088) 2021-02-03 16:25:05 +01:00
Alex Tugarev
e8adb24ecc [server/dashboard] stop moving identities
* allow our users to disconnect provider identities from their accounts

* when a user tries to connect with a provider, for which there is already a connection to anther account, we redirect to an assistance page. a summary should help to review both accounts. in the end, any user may decide to move to a single account by disconnecting the provider identities from the other account.
  this way we can guarantee to not automagically lock out users from accounts with subscriptions or any meaningful data.

* show `Connected as`

* update terms renderer

Signed-off-by: Alex Tugarev <alex@gitpod.io>
2021-02-01 08:06:11 +01:00
Alex Tugarev
0bb6ab6629 [server/auth] avoid creating duplicate accounts
in a situation where the browser agent might submit the terms form more than once, we should avoid creating new accounts. instead, we need to select the recently created account for a login in a parallel session.
2021-02-01 08:06:11 +01:00
Alex Tugarev
3644d93db9 [gitlab] Allow adding Git Provider using a relative URL
Signed-off-by: Alex Tugarev <alex@gitpod.io>
2021-01-29 08:50:18 +01:00
Cornelius A. Ludmann
70fe39a8ba [content-store] Add a content-store component with blobs API 2021-01-28 14:15:31 +01:00
ArthurSens
aae2e4544b Add metric for login requests
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
2021-01-27 14:26:04 -03:00
Sven Efftinge
b897e6777f Generate better workspace ids 2021-01-26 18:03:25 +01:00
Gero Posmyk-Leinemann
1ac8fbeef3
[server] Bump dependencies avoid pulling 'agent-base' < 6.0.0 (#2388)
* [server] Bump dependencies avoid pulling 'agent-base' < 6.0.0

* [server] Remove patch-agent-base and references

* [server] Cleanup: yarn.lock
2021-01-15 18:06:40 +01:00
Cornelius A. Ludmann
225e102dbc [admin panel] Add delete user button 2021-01-13 15:39:22 +01:00
Alex Tugarev
8ca431f86a [server/auth] ensure safe returnTo param 2021-01-13 14:45:04 +01:00
Alex Tugarev
aced836ae7 [dashboard] properly log out after account deletion
Signed-off-by: Alex Tugarev <alex.tugarev@typefox.io>
2021-01-13 10:05:04 +01:00
Alex Tugarev
3962e4c730 [server] actually delete buckets if not empty
Signed-off-by: Alex Tugarev <alex.tugarev@typefox.io>
2021-01-13 10:05:04 +01:00
Alex Tugarev
c175c2717f [server] consider scopes override
Signed-off-by: Alex Tugarev <alex.tugarev@typefox.io>
2021-01-12 08:32:29 +01:00
Alex Tugarev
dba6a37615 [server] fix unconfirmed gitlab account detection
Signed-off-by: Alex Tugarev <alex.tugarev@typefox.io>
2021-01-12 08:17:59 +01:00
koushik-ms
4710fa0b10 [server] github: allow branch names with special characters
Decode branch or commit hash segments with decodeURIComponent to revert
URL encoded strings (e.g., %23 -> #)
2021-01-08 18:23:43 +01:00
Christian Weichel
4b7737338a [server] Introduce function:* scope allowing access to all API calls 2021-01-08 13:40:43 +01:00
Christian Weichel
9440adb92d [server] Properly resolve identities when using bearer auth 2021-01-08 13:40:43 +01:00
Cornelius A. Ludmann
1af230309b [server] Fix user bucket name calculation for minio
/werft with-installer
2021-01-07 10:11:23 +01:00
Alex Tugarev
ad6ceef2ef [server] disallow prefix matching for host names 2021-01-06 16:52:30 +01:00
Christian Weichel
b7dda84ad0 [license] Update license header from TypeFox GmbH to Gitpod GmbH 2021-01-04 15:12:02 +01:00
Sven Efftinge
ae07ccf9dd [server] don't use single strategy
as it is modified by calls to passport.authenticate
2020-12-23 13:47:40 +01:00
Alex Tugarev
bf277c3199 [server] refactoring: promisify, add guard, ...
remove indirections
2020-12-23 13:47:40 +01:00
Alex Tugarev
f20f4bf4ae [server] add some logging 2020-12-23 06:06:30 +01:00
Alex Tugarev
fe2bbf72fd [server] promisify callback
Signed-off-by: Alex Tugarev <alex.tugarev@typefox.io>
2020-12-23 06:06:30 +01:00
Alex Tugarev
f954420ecf [server/auth] fix 'markAsVerfied' for self hosted 2020-12-23 06:06:30 +01:00
Alex Tugarev
d334a24677 [server] remove obsolete returnToAfterTos 2020-12-23 06:06:30 +01:00
Arthur Silva Sens
104d395e46
[server] Fix Prometheus metrics endpoint (#2609)
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
2020-12-22 13:16:22 -03:00
Anton Kosyakov
7ab9bb0f44 [server] normalize plugin names from config 2020-12-17 14:55:38 +01:00
Anton Kosyakov
6b5f126442 fix #1455: support installing extensions directly from open vsx 2020-12-16 10:57:11 +01:00
Alex Tugarev
498c5f6e5f [server] fix new user handling
Signed-off-by: Alex Tugarev <alex.tugarev@typefox.io>
2020-12-14 14:15:59 +01:00
Alex Tugarev
7a98d8b7d6 [server] fix fullName mapping in user-controller 2020-12-10 16:26:07 +01:00
Gero Posmyk-Leinemann
6d45365455 [gitpod-ext] Introduce a cache around server.update/getUserStorageProvider 2020-12-10 14:25:24 +01:00
Alex Tugarev
294c934e43 [server] Server.init should await init of dynamic auth providers
Signed-off-by: Alex Tugarev <alex.tugarev@typefox.io>
2020-12-10 13:59:08 +01:00
Alex Tugarev
f06a53b04a [server] validate host names of dynamic auth providers
Signed-off-by: Alex Tugarev <alex.tugarev@typefox.io>
2020-12-10 13:59:08 +01:00
Sven Efftinge
adae764c90 [auth] properly assign name and full name 2020-12-10 11:53:43 +01:00
Christian Weichel
f44a3a728b [misc] Add missing license header 2020-12-09 15:05:26 +01:00
Alex Tugarev
529abf8860 [server] fix issues with tos flow and login 2020-12-08 15:03:01 +01:00
Alex Tugarev
6d72a5f236 [transfer] Replace "TypeFox" with "Gitpod"
Signed-off-by: Alex Tugarev <alex.tugarev@typefox.io>
2020-12-08 10:41:44 +01:00
Alex Tugarev
906fd2e2d1 [server] integrate ToS flow with authentication
Signed-off-by: Alex Tugarev <alex.tugarev@typefox.io>
2020-12-07 17:28:24 +01:00
Alex Tugarev
9812a9f2ce clean up 2020-12-07 17:28:24 +01:00
Alex Tugarev
b354264a0f [server/auth] refreshed tokens missing user name
this should fix pushing to bitbucket.
2020-12-05 13:48:46 +01:00
Alex Tugarev
8634315954 [server/bitbucket] create API client options explicitly for tests
in tests Basic auth is used for API calls instead of Bearer tokens, this got mixed up with git authorization, where the OAuth2 token is also used for, but with a different username.
2020-12-05 12:15:49 +01:00
Christian Weichel
72588f1fa4 [server] Fix shared workspace access 2020-12-03 21:55:56 +01:00
Alex Tugarev
01e763573b [gitlab/server] fix tests / error codes 2020-12-03 09:20:39 +01:00
Alex Tugarev
ab62677230 [server] PATCH for agent-base@4.2.1
which is pulled in and hoisted via proxy-agent-base (gcloud, probot, etc.), and eagerly patches node's `https.request` function. this monkey patching is bogus though!

the `patch-patch` module provides a patched patch to be loaded first, which will load (and therefore cache) the initial patch module, and fix the substitution of `https.request` afterwards in order to be compatible with current node API again.
2020-12-03 09:20:39 +01:00
Alex Tugarev
27568b10b9 [server] bump gitlab 2020-12-03 09:20:39 +01:00
Anton Kosyakov
8c993133cb [supervisor] git token provider support 2020-12-02 09:40:35 +01:00
Anton Kosyakov
4ab9a6e899 [supervisor] token provider kind 2020-12-02 09:40:35 +01:00