1. 18 Oct, 2018 2 commits
    • BAIRE Anthony's avatar
      fix user email validation when importing webapp · 1083d987
      BAIRE Anthony authored
      Checking user.email is not ok because allauth allows multiple
      addresses per user but grants access if any of them is verified.
      -> we need to ensure that the matched address is verified
      Thus a (non-admin) user can import a webapp only if the two
      conditions are met:
      - the user is allowed to create webapps (verified by IsProviderMixin)
      - the user has a verified email address that matches the owner
        address of the imported webapp
    • BAIRE Anthony's avatar
      fix the validation of allauth emails · 6b4fa212
      BAIRE Anthony authored
      Allauth supports multiple email addresses per user. While this is
      not intended in allgo, it is still possible to configure multiple
      addresses using the /accounts/email/ endpoint.
      Problem: even with ACCOUNT_EMAIL_VERIFICATION="mandatory", allauth
      does not ensure that all addresses are verified. It only ensure
      that *any* address is verified.
      --> even if the user is validted by all auth, we still need to ensure
      that the relevant address is verified before granting access
  2. 16 Oct, 2018 2 commits
  3. 15 Oct, 2018 4 commits
  4. 10 Oct, 2018 1 commit
    • BERJON Matthieu's avatar
      Bug fix on job version testing · d9df98f7
      BERJON Matthieu authored
      This patch suggests two bug fixes. The first one return an empty string
      in the case of the user doesn't send any parameters for the application.
      The second bug fix is related to the test of an existing commited app version.
      The test of the existing version wasn't done before requesting the app
      version itself. This patch corrects it.
      Signed-off-by: BERJON Matthieu's avatarMatthieu Berjon <matthieu.berjon@inria.fr>
  5. 09 Oct, 2018 3 commits
  6. 08 Oct, 2018 2 commits
  7. 28 Sep, 2018 3 commits
  8. 27 Sep, 2018 15 commits
  9. 26 Sep, 2018 1 commit
    • BAIRE Anthony's avatar
      Allow importing a webapp from a legacy allgo instance · 51f51d9c
      BAIRE Anthony authored
      This adds two views:
      - WebappImport for importing the webapp (but without the versions).
        The import is allowed if the requesting user has the same email
        as the owner of the imported app. The webapp is created with
        imported=True, which enables the WebappVersionImport view
      - WebappVersionImport for requisting the import of webapp version.
        This only creates the WebappVersion entry with state=IMPORT
        (the actual import is performed by the controller)
      A version may be imported multiple times. In that case, the newly
      imported version overwrite the local version with the same number.
      This features requires:
      - that the rails server implements !138
      - that the docker daemon hosting the sandboxes is configured with
        credentials for pulling from the legacy registry
  10. 25 Sep, 2018 2 commits
  11. 24 Sep, 2018 5 commits