24 Commits (af0d32a98c208d00af155d656f2e5610687ded20)

Author	SHA1	Message	Date
Oliver Günther	38ecb6b28c	[32486] Use error response for unauthenticated instead of warden ... Instead of warden responding with 401 "unauthorized", use our own error response that correctly sets the `WWWW-Authenticat` header. We tripped into the default 401 error that does not output any headers if we're not returning any users. This was caused by another issue: The `session` object may be present, even though no session id exists. Checking `session&.id` instead always yields the anonymous user. This will ensure consumers of APIV3 to always get a JSON / HAL response as well. https://community.openproject.com/wp/32486	5 years ago
Henriette Dinger	bd7f4e4814	Update copyright notice	5 years ago
Oliver Günther	2fc4416601	Store User.current in current thread	5 years ago
Jens Ulferts	02cdabed65	prevent access to user api for locked admins	6 years ago
Oliver Günther	059770f533	FactoryGirl => FactoryBot ... Removes the deprecation	7 years ago
Oliver Günther	6ef4211e77	Bump copyright to 2018 (#6171) ... [ci skip]	7 years ago
Oliver Günther	518c255c1a	Fix API token usage and specs	7 years ago
Oliver Günther	cbb0d90fde	Use Rack::Test in all request specs	7 years ago
Oliver Günther	0fbb9c6168	Provide configuration option for basic auth API access ... This adds: 1. A configuration option `apiv3_enable_basic_auth` to determine whether v3 may use the basic auth strategies 2. Extensions to the warden strategies to disable them unless configured	8 years ago
Oliver Günther	7cf11bb689	Update copyright notice	8 years ago
Oliver Günther	657db6839c	Remove more params deprecations	8 years ago
Jens Ulferts	e8dec71010	fix specs	8 years ago
Mohamed Wael Khobalatte	03cce5e25d	Avoid defining same constants in multiple specs	9 years ago
Markus Kahl	bd0df07090	fixed specs	9 years ago
Markus Kahl	bcd981df5c	consider X-Authentication-Scheme; opt scoped realm	10 years ago
Markus Kahl	d854df5175	suppress browser prompt on authenticate failure	10 years ago
Jens Ulferts	f4b26f0f40	avoid spec sideeffects by mocking	10 years ago
Markus Kahl	70fe41cb53	use separate error code when unauthenticated ... also distinct error messages for missing or wrong credentials	10 years ago
Markus Kahl	c1e597c186	fixed response headers (content type, realm)	10 years ago
Markus Kahl	28d3dfd827	set WWW-Authenticate header on authentication failure	10 years ago
Markus Kahl	468357045c	spec against proper json response	10 years ago
Markus Kahl	f7b978fe8c	whitespace	10 years ago
Markus Kahl	312bd47ab8	test user basic auth on its own	10 years ago
Markus Kahl	7a7dff569c	moved auth spec to other request specs	10 years ago
Markus Kahl	72c9759d8c	whitespace	10 years ago
Markus Kahl	7e40c11ca4	moved strategies; refactoring	10 years ago
Markus Kahl	d4dfdb9dcc	use API keys for user basic auth; refactoring	10 years ago
Markus Kahl	0cf9668f6b	more specs; don't halt on failed global basic auth	10 years ago
Markus Kahl	6cb6953a07	basic auth for api v3 (WIP)	10 years ago