GitHub PushEvent at 2014-10-08 21:54:00
Repository: rapidconnect
Actor: vladimir-mencl-eresearch
Payload: {"shas":[["3c1b4cd135f45dd4a7a1aa3adeae663f6718d773","3e8ef04ebc9202dfd9acf7b95ff970413cbb7dc4@gmail.com","Backported release 1.0.1 into develop","Shaun Mangelsdorf",false],["8a5858347026fd421b408e95974f871afe03d61d","03ba907c3693404d35aa5bbcc9711e482d4f0990@canterbury.ac.nz","Documentation: fix typo\n\nBundlder => Bundler","Vladimir Mencl",false],["7a17a43f66a892240f11d24eae41527f9d43a6d7","03ba907c3693404d35aa5bbcc9711e482d4f0990@canterbury.ac.nz","Config/Apache: misc fixes (Proxy, Headers, Logs)\n\nSeveral fixes for the sample Apache config rapidconnect.conf\n* Exclude Shibboleth-SP URLs from the ProxyPass directive\n* Remove erroneous /idp from ProxyPass target\n* Add ShibUseHeaders On as needed by unicorn behind HTTP proxy\n* Rename log files from groups_* to rapid_* (copy-edit?)","Vladimir Mencl",false],["3f722038edb40fcc671bbe36b2e24391c36b59fd","03ba907c3693404d35aa5bbcc9711e482d4f0990@canterbury.ac.nz","Config/SP: add SAML2 OID mapping for O and OU\n\nProvide also a SAML2 OID mapping for O and OU (they've been so far\nmapped only with SAML1 URN attribute names).","Vladimir Mencl",false],["2c0eb578693eda7d7156e4f51b076a753e1d0a79","03ba907c3693404d35aa5bbcc9711e482d4f0990@canterbury.ac.nz","Mail: use settings.hostname in notification emails","Vladimir Mencl",false],["007cb2f6f5a705593ce7c77385aa2db20412d19c","03ba907c3693404d35aa5bbcc9711e482d4f0990@canterbury.ac.nz","Views: change remaining AAF Fuse to RapidConnect\n\nChange remaining references to AAF Fuse to AAF RapidConnect.","Vladimir Mencl",false],["20a38f8cc2ecc89b9da36959580aca4d25a7907c","03ba907c3693404d35aa5bbcc9711e482d4f0990@canterbury.ac.nz","Cookie: use secure cookie in production deployment\n\nPass \"secure: true\" to Rack options in production environment to use\n:secure session cookies.\n\nCorrespondingly, update Apache configuration so that Apache tells Racks\nthat the request has been forwarded from an SSL connection - add a\nheader:\n   X-Forwarded-SSL: on","Vladimir Mencl",false],["1097291cf748d76be53b6e940599315a17b42f20","03ba907c3693404d35aa5bbcc9711e482d4f0990@canterbury.ac.nz","Cookie: use secure cookie only in production env\n\nMake the use of secure cookie conditional on being in production\nenvironment - as per comments in #11.","Vladimir Mencl",false],["521b472ffd36b567cbc19746d23a3d5ec36730ce","a45c8ee7bead3d3aaa148e02dc46a6316894db88@gmail.com","Merge pull request #11 from University-of-Auckland/develop-mic-fixes\n\nMisc fixes for RapidConnect","Bradley Beddoes",false],["687c672f2eaee4b1c5a43512df4b4fdb0c0e170f","3e8ef04ebc9202dfd9acf7b95ff970413cbb7dc4@gmail.com","Switch erb to escape HTML by default using Erubis\n\nGuard against potential XSS and other nasties by users of Rapid Connect","Shaun Mangelsdorf",false],["74f1ff52fd1ad28df3943a4ca06cdf26c4d4d087","a45c8ee7bead3d3aaa148e02dc46a6316894db88@gmail.com","Merge pull request #12 from ausaccessfed/feature/extra-xss-protection\n\nEscape all variables inserted in HTML by default","Bradley Beddoes",false],["97ecdc6ebdc4685b7ec41fa818a447e673d090da","3e8ef04ebc9202dfd9acf7b95ff970413cbb7dc4@gmail.com","Updated dependencies","Shaun Mangelsdorf",false],["3f3f82e326210099b1b808fabb8a1240ec591622","03ba907c3693404d35aa5bbcc9711e482d4f0990@canterbury.ac.nz","Session: use memcached for session management\n\nIn preparation for Tuakiri deployment behind a load balancer in\nactive-hotstandby configuration, switch to managing sessions in\nmemcached (local to each host), keeping only service and administrator\nconfiguration in redis.\n\nSwitching sessions to memcached could be done quite easily with:\n\n  use Rack::Session::Memcache, expire_after: 3600, secure: Sinatra::Base.production?\n\nExcept this would apply the expire_after setting also to session\ncookies - which would mean session cookies would not be tied to browser\nsession and sessions would persist a browser restart.\n\nAs Rack::Session::Memcache only checks expire_after, we can't use the\ntrick done for Redis sessions in\nd11742215188aca639236eaafe41b41a0f8ada0b - passing expire_in instead,\nwhich gets checked by Redis store for expiry on session records but not\nby Rack::Session::Abstract::ID.\n\nAs both Rack::Session::Memcache and Rack::Session::Abstract::ID check\n:expire_after only, the only solution to have the expire applied to\nsessions stored in memcached (so that sessions do expire) but not to\nsession cookie (so that the cookie is instead tied to browser session)\nwas to override the set_session method in a subclass of\nRack::Session::Memcache.\n\nThat's why this commit is introducing RapidConnectMemcacheSession in\napp/rcmcsession.rb loaded by app/rapid_connect.rb - and initializes the\nclass with:\n\nuse RapidConnectMemcacheSession, memcache_session_expiry: 3600, secure: Sinatra::Base.production?","Vladimir Mencl",false],["dcc6668de94a34924894b39e9a6eb7c95c4069b9","3e8ef04ebc9202dfd9acf7b95ff970413cbb7dc4@gmail.com","Fix new violations from upgraded RuboCop","Shaun Mangelsdorf",false],["2d366c1387662b04c7f9e8f0c5376f84da9e31b7","3e8ef04ebc9202dfd9acf7b95ff970413cbb7dc4@gmail.com","Always require spec_helper for RSpec runs\n\nSaves having that require statement in every file.","Shaun Mangelsdorf",false],["a0e6a2b1a2a0575613a647fbdd832f8954582555","3e8ef04ebc9202dfd9acf7b95ff970413cbb7dc4@gmail.com","Use `falsey` and `truthy` because RSpec 3.x\n\nbe_false and be_true are gone.","Shaun Mangelsdorf",false],["9ea0c115c9f0f46ed6d562146112bea92272dbfb","3e8ef04ebc9202dfd9acf7b95ff970413cbb7dc4@gmail.com","Install Guard and plugins","Shaun Mangelsdorf",false],["9c99be0e54bc12709d0e192ea93a2f3e992d5a46","3e8ef04ebc9202dfd9acf7b95ff970413cbb7dc4@gmail.com","Add workaround for legacy RSpec matcher warnings","Shaun Mangelsdorf",false],["b62b83ab7361986771484ba7d8c35eb7cfe47ad8","3e8ef04ebc9202dfd9acf7b95ff970413cbb7dc4@gmail.com","Upgrade .should matchers to new expectation style\n\n`should` matchers are deprecated. We'll just take the once-off hit and\nfix this.","Shaun Mangelsdorf",false],["6380b9eac42ff81e89cb138c53ce32b3d2a8dfc4","3e8ef04ebc9202dfd9acf7b95ff970413cbb7dc4@gmail.com","Change mocks to use new style; stub is deprecated","Shaun Mangelsdorf",false]],"size":73,"ref":"refs/heads/master","head":"f125bdfdbe14bc70a8add4888adee32d052e2610"}