Add cookie to known sign in check
Previously GitLab only validated a user's remote IP address when checking if the sign in was known. This adds an encrypted cookie with an expiry. An unknown sign in email will only be sent if neither the remote IP nor the cookie can be validated.
显示
- app/controllers/concerns/known_sign_in.rb 16 个添加, 1 个删除app/controllers/concerns/known_sign_in.rb
- app/controllers/projects/application_controller.rb 1 个添加, 1 个删除app/controllers/projects/application_controller.rb
- app/helpers/cookies_helper.rb 13 个添加, 3 个删除app/helpers/cookies_helper.rb
- changelogs/unreleased/dblessing_known_sign_in_.yml 5 个添加, 0 个删除changelogs/unreleased/dblessing_known_sign_in_.yml
- doc/user/profile/index.md 1 个添加, 1 个删除doc/user/profile/index.md
- doc/user/profile/unknown_sign_in_notification.md 5 个添加, 2 个删除doc/user/profile/unknown_sign_in_notification.md
- ee/spec/lib/gitlab/auth/group_saml/failure_handler_spec.rb 7 个添加, 3 个删除ee/spec/lib/gitlab/auth/group_saml/failure_handler_spec.rb
- spec/controllers/concerns/sorting_preference_spec.rb 2 个添加, 2 个删除spec/controllers/concerns/sorting_preference_spec.rb
- spec/helpers/cookies_helper_spec.rb 42 个添加, 0 个删除spec/helpers/cookies_helper_spec.rb
- spec/support/shared_examples/controllers/known_sign_in_shared_examples.rb 63 个添加, 25 个删除...red_examples/controllers/known_sign_in_shared_examples.rb
加载中
想要评论请 注册 或 登录