leap_web.git - [leap

Age	Commit message (Collapse)	Author
2013-10-17	blacklist system logins for aliases and logins	Azul
	We blacklist based on three things: * blacklist in APP_CONFIG[:handle_blacklist] * emails in RFC 2142 * usernames in /etc/passwd The latter two can be allowed by explicitly whitelisting them in APP_CONFIG[:handle_whitelist]. We stick to blocking names that have been configured as both blacklisted and whitelisted - better be save than sorry.
2013-09-24	fix syslogger, log_tags are called on request	Azul
	log_tags was causing errors that could not be logged or caught. We don't need them yet anyway. config.log_tags accepts a list of methods that respond to request object. This makes it easy to tag log lines with debug information like subdomain and request id — both very helpful in debugging multi-user production applications. http://guides.rubyonrails.org/configuring.html
2013-09-23	Revert "default to syslog in production - #3886"	Azul
	This reverts commit 073dc636ffa2da07ee7a719c6166a3ca1b593fb3. Conflicts: config/environments/production.rb
2013-09-23	hotfix: syslog now uses a different name	Azul
	also make sure the gem > 2.0.0 so it actually IS called Syslog::Logger.
2013-09-19	Merge pull request #82 from azul/feature/sessions-expire	jessib
	Feature/sessions expire
2013-09-19	default to syslog in production - #3886	Azul

2013-09-17	use new couchrest session store - expire after 30min	Azul

2013-09-03	expire token according to config setting auth:token_expires_after	Azul

2013-09-02	document the logfile option in the defaults.yml	Azul

2013-09-02	add config setting for logfile	Azul
	This is the most simple thing that could possibly work. If you do not specify a :logfile in your environments config Rails will use the default.
2013-08-27	Not ideal way to do it, but was proving complicated to have a config file ↵	jessib
	specify which gems for which environments. Here, we have the billing gem included for the development and test environments only, hardcoded in the Gemfile. Then we show the links to billing based on a config file setting. The setting itself could be used to specify different types of billing, but isn't yet.
2013-08-01	Merge branch 'master' into billing_with_tests	jessib
	Conflicts: app/views/home/index.html.haml
2013-07-17	Fix breakage due to empty config file for a given env	Azul

2013-07-17	Hacky, but avoids SSL certificate error in development mode.	jessib

2013-07-14	remove freeze on APP_CONFIG for now	elijah

2013-07-11	config - add force_ssl to config, add configuration notes to README.md	elijah

2013-07-04	add 'blue' to admins in dev mode.	elijah

2013-07-04	moved app locales to core gem.	elijah

2013-07-04	added 'thin' and 'quiet_assets' gems to make development mode much nicer.	elijah

2013-07-04	i18n - added a few strongs to app, fixed language at english for now.	elijah

2013-07-04	set pagination size via config file	elijah

2013-07-04	start of new ui - css changes, layout changes, navigation changes.	elijah

2013-04-08	Merge pull request #39 from azul/feature/keep-session-secret	jessib
	fetch secret token for signing cookies from config
2013-04-03	make sure user tests also run when run from users subdir	Azul
	* The APP_CONFIG needs to be initialized in core so that is required from other engines * paths for load_views need to be relative to the model - not to rails root.
2013-03-15	fetch secret token for signing cookies from config	Azul

2013-03-06	certs - changed the logic of free/paid certs to be limited/unlimited.	elijah

2013-02-27	change free cert postfix to be a prefix (this is required for how openvpn ↵	elijah
	does common name matching)
2013-02-25	added configuration setting for disabling free certs	Azul

2013-02-25	enable free certs with a common name postfix	Azul

2013-02-09	configure couchrest session store in initializer	Azul

2013-02-09	fall back to {} if config file is empty for environment	Azul

2013-02-09	use at least couchrest_session_store 0.0.8	Azul

2013-02-05	use the latest couch rest session store	Azul
	and actually use it - initializer was broken before
2013-01-31	config key is not ca_cert_path anymore - client_ca_cert	Azul

2013-01-26	moving leap_ca configs into defaults.yml	Azul

2013-01-15	For both users and tickets, if the object is not found and the current user ↵	jessib
	is an admin, they should see an alert that the object wasn't found, and be redirected to the current controller. If the object isn't found and the current user is not an admin, then we will continue to give an error about no access, so as not to leak information about what IDs do and don't exist.
2012-12-20	config hash now has indifferent access	Azul

2012-12-20	Loading config defaults from default.yml now	Azul
	You can overwrite them in config/config.yml
2012-12-13	removing couchdb.yml so it does not conflict with deploy. will create ↵	Azul
	defaults.yml later
2012-12-10	use consistent naming scheme across CA, webapp and couchDB install	Azul

2012-11-26	minor: client side validations fixed + .json request	Azul

2012-11-22	ship config file so CI can test	Azul

2012-11-12	adding client side validations to the mix	Azul

2012-11-04	minor: yaml syntax fix	Azul

2012-10-31	Code to check administration (and ugly test display.) This includes example ↵	jessib
	config file.
2012-10-29	first steps at is_admin?	Azul

2012-10-19	added dummy cert file for tests and illustration	Azul

2012-10-19	Revert "Created deploy branch with some springbok specifics"	Azul
	This reverts commit 439e27ef2792a03e5e50f8b9c607fca512cb1452. Conflicts: config/cert
2012-10-11	fixed cert tests - adding test data and not testing the inline cert download ↵	Azul
	filename
2012-10-11	first steps at reducing core	Azul