Bill Nottingham
1b3ae50076
Add originating address for the failed login message
2019-03-20 11:34:35 -04:00
Hideki Saito
ef3b1ee195
Add action to output login failure to logger
...
Signed-off-by: Hideki Saito <saito@fgrep.org >
2019-02-20 14:27:44 +00:00
Ryan Petrello
9bebf3217e
remove usage of import * and enforce F405 in our linter
...
import * is a scourge upon the earth
2019-02-13 17:10:33 -05:00
Ryan Petrello
daeeaf413a
clean up unnecessary usage of the six library (awx only supports py3)
2019-01-25 00:19:48 -05:00
Jake McDermott
a8728670e1
handle credential.inputs in decryption utils
2019-01-22 22:56:24 -05:00
Ryan Petrello
8cb8e63db5
fix a py3 bug that breaks the SSO complete endpoint
2019-01-21 17:04:13 -05:00
Ryan Petrello
f223df303f
convert py2 -> py3
2019-01-15 14:09:01 -05:00
adamscmRH
05d988349c
make current_user ck secure and httponly
2018-11-21 10:36:35 -05:00
AlanCoding
a9d88f728d
Pre-delete bulk delete related, fix parallel request conflicts
2018-11-15 11:39:48 -05:00
Wayne Witzel III
198a0db808
move organization views to their own file
2018-11-07 18:18:41 -05:00
Ryan Petrello
3b997cdd3a
remove extraneous OPTIONS content re: the new named URL feature
2018-08-15 10:22:42 -04:00
Ryan Petrello
ec735b7b47
check oauth_scopes in _every_ view
...
see: https://github.com/ansible/tower/issues/2759
2018-08-06 11:05:59 -04:00
Yunfan Zhang
cb6d7dfe69
Fix credential leak when copying Job Templates.
...
Signed-off-by: Yunfan Zhang <yz322@duke.edu >
2018-07-25 11:51:17 -04:00
adamscmRH
896ffb2065
Fixes sessions in multiple tabs
2018-07-13 16:31:23 -04:00
Ryan Petrello
090c585be5
remove unnecessary spaces
2018-07-11 09:50:50 -04:00
Ryan Petrello
2916edd70f
Add a Location header to HTTP 201 for POST to copy endpoints
2018-07-09 08:47:01 -04:00
adamscmRH
ae0793f374
Hookup UI session expiration
2018-07-03 16:53:27 -04:00
Yunfan Zhang
b4890ee331
Handle exception with invalid HTTP content_type.
...
Signed-off-by: Yunfan Zhang <yz322@duke.edu >
2018-07-03 13:55:18 -04:00
Ryan Petrello
b8ed78ee9d
Never send WWW-Authenticate: Basic... headers for the API
2018-06-28 13:00:23 -04:00
Ryan Petrello
3b0f7de3e6
Properly return HTTP 403 when CSRF fails (not HTTP 500)
2018-06-28 09:33:59 -04:00
Ryan Petrello
7880f83d97
don't send WWW-Authenticate: Basic for AJAX, and properly detect 401
2018-06-26 08:40:21 -04:00
adamscmRH
b7f5161835
try-except auth_header
2018-06-21 17:11:34 -04:00
Alan Rominger
bcd9c5dada
Merge pull request #2098 from AlanCoding/u_no_copy
...
Prohibit users without read_role from viewing copy endpoint
2018-06-08 08:54:32 -04:00
AlanCoding
ed762fd4b6
prohibit users without read_role from viewing copy endpoint
2018-06-07 15:14:49 -04:00
AlanCoding
8509a43b95
exclude m2m copies from activity stream
2018-06-07 13:34:58 -04:00
AlanCoding
c690da4058
make copy endpoints specific to v2
2018-05-30 14:01:58 -04:00
Ryan Petrello
a0433773d8
don't allow Accept:application/json on /api/login/
...
see: https://github.com/ansible/tower/issues/1672
2018-05-25 14:21:22 -04:00
AlanCoding
ec1e94376c
correctly check credential permission on WFJT copy
2018-05-03 07:42:59 -04:00
adamscmRH
dead84da1a
add auth cookies
2018-05-01 16:57:17 -04:00
adamscmRH
0f046338ac
check ParseError fix
2018-04-06 08:47:54 -04:00
Alan Rominger
dcae4f65b5
Merge pull request #1330 from AlanCoding/capable_of_anything
...
New copy fields, clean up user_capabilities logic
2018-03-13 12:05:45 -04:00
Jake McDermott
75a27f2457
issue 401 on invalid login
2018-02-28 02:02:52 -05:00
AlanCoding
ce9234df0f
Revamp user_capabilities with new copy fields
...
Add copy fields corresponding to new server-side copying
Refactor the way user_capabilities are delivered
- move the prefetch definition from views to serializer
- store temporary mapping in serializer context
- use serializer backlinks to denote polymorphic prefetch model exclusions
2018-02-26 12:13:41 -05:00
adamscmRH
310f37dd37
clears authtoken & add PAT
2018-02-22 15:18:12 -05:00
Aaron Tan
1c2621cd60
Implement session-based and OAuth 2 authentications
...
Relates #21 . Please see acceptance docs for feature details.
Signed-off-by: Aaron Tan <jangsutsr@gmail.com >
2018-02-22 15:18:12 -05:00
Ryan Petrello
7472026cca
remove the new_in_<version> in API doc gen
...
see: https://github.com/ansible/awx/issues/73
2018-02-08 16:21:22 -05:00
Alan Rominger
b3dcfc8c18
Merge pull request #903 from ansible/item_copy
...
Implement item copy feature
2018-02-08 15:51:16 -05:00
Jake McDermott
90f555d684
always return schema from get_default_schema
2018-02-07 13:42:01 -05:00
Ryan Petrello
1adb4cefec
fix a bad swagger-related import that breaks the build
2018-02-07 08:56:59 -05:00
Ryan Petrello
ac7c5f8648
clean up API markdown docs
2018-02-06 10:12:57 -05:00
Ryan Petrello
57c22c20b2
add support for building swagger/OpenAPI JSON
...
to build, run `make swagger`; a file named `swagger.json` will be
written to the current working directory
2018-02-06 10:12:57 -05:00
Aaron Tan
a2fd78add4
Implement item copy feature
...
See acceptance doc for implement details.
Signed-off-by: Aaron Tan <jangsutsr@gmail.com >
2018-01-02 10:20:44 -05:00
AlanCoding
e3a731bb9e
apply listview optimizations to detail view
2017-12-13 16:09:37 -05:00
Matthew Jones
9dbcc5934e
Merge remote-tracking branch 'tower/release_3.2.2' into devel
2017-12-13 12:25:47 -05:00
Ryan Petrello
ce94ba4c83
change how we detect the current user to avoid a nuanced recursion error
...
see: https://github.com/ansible/ansible-tower/issues/7802
2017-12-08 15:35:47 -05:00
Ryan Petrello
28ce9b700e
replace all Job/JT relations with a single M2M credentials relation
...
Includes backwards compatibility for now-deprecated .credential,
.vault_credential, and .extra_credentials
This is a building block for multi-vault implementation and Alan's saved
launch configurations (both coming soon)
see: https://github.com/ansible/awx/issues/352
see: https://github.com/ansible/awx/issues/169
2017-11-14 12:49:12 -05:00
Wayne Witzel III
96904968d8
Fix migration issues, tests, and templates
2017-11-09 17:29:48 -05:00
AlanCoding
d2e0b26287
allow deleting hosts and groups from inv src sublists
2017-10-10 14:38:47 -04:00
AlanCoding
9ee18d02c8
new method of performance logging
2017-10-10 14:38:45 -04:00
AlanCoding
aa14d12f42
show just id field for API browser POST box
2017-07-25 15:49:16 -04:00