#8128 Fix ApacheAccessHandler.py (git repo logins) for two-factor auth, add git-http container

v1.6.0
closed
None
General
nobody
2016-09-23
2016-09-16
No

ApacheAccessHandler.py can be used to authenticate repo access on the server, and we use it on forge-allura.apache.org for git repos. It simulates a web login to verify authentication, but it can't handle two-factor auth.

Related

Tickets: #8129

Discussion

  • Dave Brondsema

    Dave Brondsema - 2016-09-20

    Fix in db/8128 This also adds a "git-http" container to run the access handler locally, and provide local http based checkouts. A fresh docker setup or just running docker-compose up -d should set it up I think.

    Then you can do a git checkout from localhost:8081 (as mentioned in the checkout commands on the repo web pages). If you are using docker-machine in a VM, or a remote host, just change "localhost" to the right IP address or host.

    Also note that for 2FA you have to enter your password + pin code together, as your password. And it may error out if you try too many at once.

     
  • Dave Brondsema

    Dave Brondsema - 2016-09-20
    • summary: Fix ApacheAccessHandler.py (git repo logins) for two-factor auth --> Fix ApacheAccessHandler.py (git repo logins) for two-factor auth, add git-http container
    • status: open --> review
     
  • Kenton Taylor - 2016-09-22

    Feedback v1

    • Strikes me as important to provide some messaging to users who have enabled 2FA about the different password req's needed to supply the 2FA token ($password$token). Whether that be as part of the messaging Git emits on the CLI, or even just on the Code Repo page.
     
  • Dave Brondsema

    Dave Brondsema - 2016-09-22
    • status: review --> in-progress
    • assigned_to: Dave Brondsema
     
  • Dave Brondsema

    Dave Brondsema - 2016-09-22
    • status: in-progress --> review
     
  • Dave Brondsema

    Dave Brondsema - 2016-09-22

    Good point. Updated the branch to show a contextual message.

     
  • Kenton Taylor - 2016-09-23

    Feature, and updated message look good. Clear to merge.

     
  • Dave Brondsema

    Dave Brondsema - 2016-09-23
    • status: review --> closed
     
  • Dave Brondsema

    Dave Brondsema - 2016-12-14
    • Milestone: unreleased --> v1.6.0
     

Log in to post a comment.