ahuston-0/hydra
1
0
Fork 0
Code Issues Pull Requests 1 Packages Projects Releases Wiki Activity
4,458 Commits 6 Branches 0 Tags
c6424f37a6e72dae63383cc6b60eea0296a770f6
Commit Graph

3105 Commits

Author SHA1 Message Date
Graham Christensen
725c9c2f81 login: redirect to the current-user page 2021-04-28 08:32:10 -07:00
Graham Christensen
d589db2ed9 login: missing parameters are 400s 2021-04-28 08:31:59 -07:00
regnat
abff212d06 Use system-features from the Nix conf in the default machine file 
Fix #936
 2021-04-28 11:43:04 +02:00
Cole Helbling
72fec31dbb hydra-api: flesh out JobsetInput schema 2021-04-27 16:16:42 -07:00
Cole Helbling
2600810551 hydra-api: flesh out Jobset schema 
* made all columns available via the API (except for forceeval)
* renamed flakeref to flake to unify the API with the database schema
* renamed inputs to jobsetinputs to unify the API with the database schema
 2021-04-27 16:16:42 -07:00
Cole Helbling
50fab154a4 ToJSON: serialize string_columns to JSON 
If the column is undefined, then it should be an empty string according to your
API spec.
 2021-04-26 16:39:13 -07:00
Graham Christensen
f2b9649bf2 Projects: serialize enabled and hidden as boolean 2021-04-26 16:03:32 -07:00
Graham Christensen
4aea02e1e1 ToJSON: serialize boolean_columns to JSON boolean 2021-04-26 16:03:32 -07:00
Cole Helbling
c757867b9e Add homepage to Projects schema 2021-04-26 15:46:30 -07:00
Graham Christensen
453b8479be Merge pull request #927 from cole-h/nonexistent-user-400 
Return HTTP 400 when creating Project with nonexistent user
 2021-04-26 14:40:15 -04:00
Cole Helbling
47e19ba22c Return HTTP 400 when creating Project with nonexistent user 2021-04-26 11:32:39 -07:00
Drew Hess
523d6df5b8 Fix GitHub status update for private flakes. 
Also, if the parse fails, don't try to update the GitHub status, as
this will eventually cause rate-limiting.
 2021-04-26 01:38:24 +01:00
Maximilian Bosch
21ed005c84 Make it possible to enable email notifications when creating a jobset 
The checkbox is only enabled if `email_notification = 1` is set in
`hydra.conf`. However, when creating jobset (in contrast to the edit
form), the checkbox is always disabled because the `emailNotification`
parameter in Catalyst's stash was missing.
 2021-04-24 19:48:43 +02:00
Graham Christensen
05636de7d2 hydra-init: upgrade passwords to Argon2 on startup 2021-04-16 12:32:13 -04:00
Graham Christensen
79b0ddc27d hydra-create-user: re-hash sha1 as Argon2 2021-04-16 12:32:13 -04:00
Graham Christensen
d10d8964f2 Users: add a validation step which lets the user's password be a Argon2 hashed sha1 hash. 
OWASP suggests expiring all passwords and requiring users to update their password.
However, we don't have a way to do this. They suggest this mechanism
as a good alternative:
https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#upgrading-legacy-hashes
 2021-04-16 12:32:13 -04:00
Eelco Dolstra
fa924ea697 Merge pull request #915 from grahamc/hydra-auth 
Hydra auth: support Argon2, transparently upgrade hashes
 2021-04-15 17:40:32 +02:00
Graham Christensen
9225be0897 Drop remaining sha1_hex references 
Co-authored-by: Graham Christensen <graham@grahamc.com>
 2021-04-15 11:35:18 -04:00
Graham Christensen
1d956be61e hydra-create-user: support Argon2 
Co-authored-by: Graham Christensen <graham@grahamc.com>
 2021-04-15 11:35:16 -04:00
Graham Christensen
beb5be4302 Users: password changes via the web UI now use Argon2 
Co-authored-by: Graham Christensen <graham@grahamc.com>
 2021-04-15 11:35:13 -04:00
Graham Christensen
1da70030b7 Users: transparently upgrade passwords to Argon2 
Passwords that are sha1 will be transparently upgraded to argon2,
and future comparisons will use Argon2

Co-authored-by: Graham Christensen <graham@grahamc.com>
 2021-04-15 11:35:11 -04:00
Graham Christensen
29620df85e Passwords: check in constant time 
The default password comparison logic does not use
constant time validation. Switching to constant time
offers a meager improvement by removing a timing
oracle.

A prepatory step in moving to Argon2id password storage, since we'll need this change anyway after
for validating existing passwords.

Co-authored-by: Graham Christensen <graham@grahamc.com>
 2021-04-15 11:34:56 -04:00
Graham Christensen
d4d8f1ba1b Plugin::Authentication config: modernize 
Some time in the last decade the plugin switched to preferring
a flatter namespace for realm config.

Co-authored-by: Graham Christensen <graham@grahamc.com>
 2021-04-15 11:34:47 -04:00
Eelco Dolstra
0bee194ce9 Merge pull request #914 from Ma27/fix-remote-builds 
Fix `std::bad_alloc` errors for remote builds
 2021-04-15 17:05:54 +02:00
Maximilian Bosch
2808227eb7 Fix std::bad_alloc errors for remote builds 
In Nix the protocol was slightly altered[1] to also contain more
information about realisations. This however wasn't read from the pipe
that was used to read from the store.

After the `cmdBuildDerivation` command which caused this issue, Hydra
will issue a `cmdQueryPathInfos` that tries to read from the remote
store as well. However, there's still left over to read from the
previous command and thus Nix fails to properly allocate the expected
string.

[1] See rev a2b69660a9b326b95d48bd222993c5225bbd5b5f

Fixes #898
 2021-04-15 15:16:52 +02:00
Graham Christensen
b9bcedbfdb Merge pull request #596 from kquick/local_inp_url 
Update prompt for Local path input to indicate a URL is also valid.
 2021-04-14 20:01:58 +00:00
Graham Christensen
ffc4be6743 Merge pull request #910 from grahamc/ui-fixups 
UI fixups
 2021-04-12 17:42:01 +00:00
Graham Christensen
afd064d19d Merge pull request #867 from ck3d/fix-proxy-login 
Fix login if Hydra runs behind HTTP proxy with sub-path location
 2021-04-12 17:36:55 +00:00
Graham Christensen
82953389e4 Make new jobsets enabled by default in the UI 
If the jobset is brand new, none of the options matched. This
makes all new jobsets default to Enabled.
 2021-04-12 12:01:24 -04:00
Graham Christensen
0fe4cba5b7 edit-jobset: make the "add a new input" button span the whole way 
Previously it would only cross 4 of the 5 columns.
 2021-04-12 12:01:24 -04:00
Graham Christensen
e674fb6139 edit user: make the role changer checkboxes 
Also, it makes the role changer a bit of a dangerzone visually for
admins.
 2021-04-09 14:07:10 +00:00
Graham Christensen
258b39f1e5 Merge pull request #677 from twhitehead/javascripts-update 
Javascript libraries update
 2021-04-09 14:05:47 +00:00
Eelco Dolstra
20c1efeb5b Merge pull request #904 from Ma27/gitea-integration 
Add `GiteaStatus`-Plugin
 2021-04-08 17:57:38 +02:00
Tyson Whitehead
e51a6a4bca Cards are now required to decorate pre blocks 2021-04-08 11:32:30 -04:00
Tyson Whitehead
7d3bd08c9b Fix tab link spacing issue by dropping old sticky navbar css hack 2021-04-08 11:32:29 -04:00
Samuel Dionne-Riel
def05105bb Add top spacing to tab contents 2021-04-08 11:32:26 -04:00
Samuel Dionne-Riel
d85b846357 Fix spacing with search inputs 
And more importantly, crucially, fix the "appended" button so the round
corners are on the right (heh) side.
 2021-04-08 11:32:08 -04:00
Samuel Dionne-Riel
20e3c51ba9 Style unstyled alerts 2021-04-08 11:32:02 -04:00
Graham Christensen
db2c9fe96a layout.tt: make the header constrained to the center 2021-04-08 11:31:56 -04:00
Graham Christensen
9c903e9991 renderEvals: fixup colspan on Jobs and More 2021-04-08 11:31:47 -04:00
Graham Christensen
c8dd5b57c4 src/root/Makefile: fixup extraction of the fontawesome and bootstrap archives 2021-04-08 11:31:39 -04:00
Tyson Whitehead
abe082c1d6 Couple of upstream/bootstrap items missed in rebase 2021-04-08 11:31:34 -04:00
Tyson Whitehead
b5e18ce62c Fix the empty popovers 2021-04-08 11:31:34 -04:00
Tyson Whitehead
2902684c61 Update jobset comparison button 2021-04-08 11:31:34 -04:00
Tyson Whitehead
3f77bd240f Bring deep-embedding (tab anchors) javascript up-to-date 2021-04-08 11:31:34 -04:00
Tyson Whitehead
b6f5b6eb38 Labels are now badges 2021-04-08 11:31:34 -04:00
Tyson Whitehead
70df5e6312 Update button styles as btn-mini is no more 2021-04-08 11:31:34 -04:00
Graham Christensen
1e34cd3d3d fixups to the rebase 2021-04-08 11:30:49 -04:00
regnat
26ffd4a93e Fix build with latest master 2021-04-08 17:11:15 +02:00
Graham Christensen
cc9c91fe12 jobsets: put hidden and enabled jobsets at the end 
Allows for generally correct zebra striping
 2021-03-31 14:33:20 +00:00