Commit graph

21 commits

Author SHA1 Message Date
Martin Gruner
24c3bdfd87 Maintenance: Update copyright header. 2022-01-01 14:38:12 +01:00
Martin Gruner
64a87b1c67 Fixes #2709, fixes #2666, fixes #2665, fixes #556, fixes #3275 - Refactoring: Implement new translation toolchain based on gettext.
- Translations are no longer fetched from the cloud.
- Instead, they are extracted from the codebase and stored in i18n/zammad.pot.
- Translations will be managed via a public Weblate instance soon.
- The translated .po files are fed to the database as before.
- It is now possible to change "translation" strings for en-us locally via the admin GUI.
- It is no longer possible to submit local changes.
2021-11-15 16:58:19 +01:00
Dominik Klein
2b58a97c68 Maintenance: Simulate login instead of using the real login form all the time. 2021-11-04 14:40:58 +01:00
Dominik Klein
467bc03224 Fixes #2389 - Enhance LDAP login to not affect "failed logins". 2021-08-16 08:49:32 +02:00
Thorsten Eckel
b8b57781b7 Maintenance: Activated rubocop Layout/LeadingCommentSpace. 2021-07-19 15:43:33 +02:00
Martin Gruner
5df98684da Maintenance: Update copyright information and add a new rubocop cop to watch over it. 2021-06-01 12:20:20 +00:00
Thorsten Eckel
876c0b18fd Fixes issue #2983 - HTTP 401 responses causing issues with Basic Authentication. 2021-02-04 09:28:41 +01:00
Marcel Herrguth
8d140037e4 Fixes #3128 - Add SSO login button to login page. 2020-09-22 15:55:25 +02:00
Mantas Masalskis
9dd2b59037 Maintenance: Show less error details to non-admin users 2020-09-22 15:55:25 +02:00
Martin Edenhofer
8a3be0488d Improved error message for SSO if REMOTE_USER is blank. 2020-08-13 12:46:27 +02:00
Ryan Lue
95de420a35 Fixes #3064: Double-render error on HTTP Basic auth
This commit fixes a regression[0]
introduced in becbdb1ba (the Pundit migration).

Specifically, `CalendarSubscriptionsController` appears to be
the only controller that supports HTTP Basic authentication
(for calendar clients like Thunderbird Lightning or Calendar.app),
and the migration changed the control flow
for HTTP Basic authentication + authorization:

    # before
    authentication_check({ basic_auth_promt: true, permission: 'user_preferences.calendar' })

    # after
    authentication_check(basic_auth_promt: true) && authorize!

After this change, `#authentication_check` is expected
to communicate success or failure through its return value,
but prior to this bugfix, its return value was always truthy.
This led to a double-render error,
where a response code and message were set twice,
upon the failures of both authentication and authorization.

This fix adds a `return false` in the authorization failure case,
short-circuiting the `#authorize!` call and eliminating the error.

[0]: https://github.com/zammad/zammad/issues/3064
2020-05-26 16:33:11 +02:00
Ryan Lue
becbdb1baa Refactoring: Replaced home-rolled authorization logic in Controllers with Pundit. 2020-03-19 10:39:51 +01:00
Thorsten Eckel
d1ed72a071 Existing user session when requesting SSO session create endpoint will fail device check because of missing fingerprint param (which is required as soon as a user/session is present). 2019-09-30 19:34:13 +02:00
Ryan Lue
33bef7123d Feature: Single sign-on (SSO). 2019-09-05 16:02:31 +02:00
Jens Pfeifer
e48256c130 Refactoring: Removed use of unnecessary exception wrapper method response_access_deny. 2019-02-26 11:37:31 +01:00
Thorsten Eckel
e8a57517f4 Updated rubocop - applied custom Layout/AlignHash style. 2018-12-19 18:33:22 +01:00
Thorsten Eckel
9af50f2a4e Updated rubocop to latest version (0.59.2) and applied required changes. 2018-10-09 08:17:41 +02:00
Thorsten Eckel
bf6192113a Improved overall performance by using logger.debug { ... } instead of logger.debug(...). This decreases the LDAP import dry runtime by ~33%. 2018-03-22 10:39:32 +01:00
Thorsten Eckel
705487154c Applied changes for Rubocop 0.51. 2017-11-23 09:09:44 +01:00
Jens Pfeifer
533b44af8f Updated to rails 5.0. 2017-09-08 08:28:34 +00:00
Thorsten Eckel
5eb49443dd Refactoring: Splitted ApplicationController functionality into separat modules and concerns. 2017-03-09 15:31:26 +01:00