18374 Commits

Author SHA1 Message Date
AlanCoding
39cb9f2652
lock IG for updating list 2018-07-25 11:08:40 -04:00
Ryan Petrello
27fbfbb62d
Merge pull request #2668 from ryanpetrello/verify-csrf-websockets
prevent cross site request forgery in websockets w/ a CSRF token
2018-07-25 10:15:36 -04:00
Ryan Petrello
af84b25726
prevent cross site request forgery in websockets w/ the CSRF token
now that we have the CSRF middleware, we have a reliable token
available to us which we can use to verify individual ws_receive
payloads;  this is _simpler_ than making sure you've properly configured
trusted origins, and it's also more secure than Origin header checks

see: https://github.com/ansible/tower/issues/2661
2018-07-25 09:47:53 -04:00
Christian Adams
d2d5b8ca62
Merge pull request #2664 from rooftopcellist/help_text_ext_user_tokens
help text for oauth ext user toggle
2018-07-25 09:20:55 -04:00
adamscmRH
12279b9631 help text for oauth ext user toggle 2018-07-25 08:54:37 -04:00
Jared Tabor
53c9c0b7f8
Merge pull request #2626 from jaredevantabor/fix-1501
Removes trailing slash for retrieving the scheduler partial
2018-07-24 17:44:37 -07:00
Ryan Petrello
0692b1c5ef
Merge pull request #2665 from mabashian/socket-whitelist
Adds websocket origin whitelist to development.py
2018-07-24 17:03:47 -04:00
mabashian
bf40dc4793 Adds websocket origin whitelist 2018-07-24 16:53:48 -04:00
Ryan Petrello
982db88349
Merge pull request #2663 from ryanpetrello/origin-verify-refactor
slightly refactor origin validity checks
2018-07-24 15:31:31 -04:00
Ryan Petrello
c81d2f53c5
slightly refactor origin validity checks 2018-07-24 15:16:09 -04:00
Michael Abashian
21568f74c0
Merge pull request #2624 from mabashian/2612-jt-scm
Limit the cred types that we show when adding creds to JT
2018-07-24 14:24:03 -04:00
Michael Abashian
73851a6a56
Merge pull request #2657 from mabashian/hard-source-webpack-plugin
Bumps hard-source-webpack-plugin dev dep
2018-07-24 14:23:33 -04:00
Michael Abashian
d7b545b023
Merge pull request #2656 from mabashian/2654-jobs-inv
Correctly links to inventory on jobs/templates list
2018-07-24 14:22:15 -04:00
Ryan Petrello
6d1a8ec6ec
Merge pull request #2655 from ryanpetrello/fix-ws-cross-origin
improve robustness of host comparision for wss:// Origin headers
2018-07-24 13:43:05 -04:00
Ryan Petrello
4b3ca080d4
improve robustness of host comparision for wss:// Origin headers
see: https://github.com/ansible/tower/issues/2647
2018-07-24 13:30:04 -04:00
mabashian
e3601b71c0 Bumps hard-source-webpack-plugin dev dep 2018-07-24 12:04:45 -04:00
mabashian
5d5a6bb858 Correctly links to inventory on jobs/templates list 2018-07-24 11:47:58 -04:00
Ryan Petrello
c0da6f04cd
Merge pull request #2648 from ryanpetrello/fix-ws-cross-origin
[3.3.0] reject ws:// connections w/ origin mismatches
2018-07-24 10:13:46 -04:00
Bill Nottingham
90c03af61b
Merge pull request #2646 from wenottingham/a-moment-like-this
Fix moment minute specifier.
2018-07-24 10:02:48 -04:00
Alan Rominger
f0252f67dc
Merge pull request #2625 from AlanCoding/just_role
Write special cases for object_association field
2018-07-24 07:46:22 -04:00
Ryan Petrello
e7279f2fe2
reject ws:// connections w/ origin mismatches
see: https://github.com/ansible/tower/issues/2647
2018-07-23 21:56:31 -04:00
Bill Nottingham
39ffeb31f9 Fix moment minute specifier. 2018-07-23 21:24:37 -04:00
Jared Tabor
1daba7ffb3
Switching to $http service instead of Rest service.
Because the Rest.setUrl function adds a trailing slash to the URL,
which is unnecessary for a partial.
2018-07-23 13:55:06 -07:00
Alan Rominger
4c023d21af
Merge pull request #2639 from AlanCoding/cool_as_isolated
Disallow adding or removing instance from iso-IG
2018-07-23 15:57:23 -04:00
AlanCoding
6d305c60d5
Disallow adding or removing instance from iso-IG 2018-07-23 15:39:30 -04:00
Chris Meyers
90fba9381d
Merge pull request #2632 from chrismeyersfsu/fix-saml_admin_attr
fix saml_admin_attr
2018-07-23 12:06:02 -04:00
Alan Rominger
c878c027f5
Merge pull request #2631 from AlanCoding/host_dne
Handle does-not-exist errors in JobHostSummary unicode method
2018-07-23 10:37:37 -04:00
AlanCoding
fa3a334424
Handle does not exist errors in JobHostSummary unicode 2018-07-23 10:17:47 -04:00
chris meyers
3fcd1575c1 fix saml_admin_attr 2018-07-23 10:08:18 -04:00
Christian Adams
95a32aaa6e
Merge pull request #2606 from rooftopcellist/update_logging_doc
Update logging doc
2018-07-22 16:15:28 -04:00
Chris Meyers
32c2e36ac4
Merge pull request #2630 from chrismeyersfsu/better-minishift_devel
more robust minishift bringup
2018-07-20 15:52:35 -04:00
chris meyers
7d24566120 more robustness 2018-07-20 15:02:44 -04:00
AlanCoding
5de321ae7a
write special cases for object_association field 2018-07-20 12:40:12 -04:00
kialam
a04d3f817a
Merge pull request #2615 from kialam/fix/1444-fix-auto-close-modal
Fix prompt modal closing prematurely on JT list page
2018-07-20 11:47:00 -04:00
John Mitchell
d32997684c
Merge pull request #2613 from jlmitch5/orgSmartInvNotice
add information to the smart inventory button could change based on o…
2018-07-20 11:37:30 -04:00
mabashian
3f6f6a4b7d Limit the cred types that we show when adding creds to JT 2018-07-20 11:06:49 -04:00
Michael Abashian
2e55b7a4ee
Merge pull request #2620 from mabashian/2557-copy
Change post-copy behavior
2018-07-20 11:00:48 -04:00
Michael Abashian
d5edeb6f73
Merge pull request #2605 from mabashian/802-jt-creds
Allow users with edit permission on the JT to add/remove credentials
2018-07-20 11:00:31 -04:00
John Mitchell
3355b32582
update grammar 2018-07-20 10:53:09 -04:00
kialam
eabdda92b3 Show "working" message before view refresh 2018-07-20 10:52:52 -04:00
Jake McDermott
70174a2d1c
Merge pull request #1 from jakemcdermott/2557-copy
update copy tests
2018-07-20 10:37:34 -04:00
Jake McDermott
bdd240f0e4
Merge pull request #2581 from ansible/jakemcdermott-patch-1
make first and last name optional
2018-07-20 10:32:49 -04:00
Jake McDermott
32f0e54666
make first and last name optional 2018-07-20 10:16:08 -04:00
Jake McDermott
4937d1f75e
update copy tests 2018-07-20 10:02:50 -04:00
Marliana Lara
831e79ff17
Merge pull request #2621 from marshmalien/fix/2619-scm-icon
Change scm update icon to fa-refresh
2018-07-20 09:36:08 -04:00
Marliana Lara
7c5fc27d96
Merge pull request #2608 from marshmalien/fix/1599-about-modal
Move About modal to header
2018-07-19 16:53:19 -04:00
Michael Abashian
eb1c1acd5d
Merge pull request #2574 from mabashian/2253-pendo-checkbox
Only show pendo checkbox on in license form if license is missing
2018-07-19 16:43:24 -04:00
Marliana Lara
147d301ff9
Change scm update icon from cloud-download to refresh 2018-07-19 16:43:03 -04:00
mabashian
5032849624 Remove unused deps in license controller 2018-07-19 16:19:50 -04:00
Michael Abashian
58dad97cf0
Merge pull request #2582 from mabashian/1558-settings-unsaved
Revert the auth/ldap dropdowns if saving unsaved changes is not successful
2018-07-19 16:16:33 -04:00