Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
G
gitlab-ce
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
1
Merge Requests
1
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
nexedi
gitlab-ce
Commits
ff9881d9
Commit
ff9881d9
authored
Oct 08, 2018
by
Nick Thomas
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Remove unencrypted webhook token and URL columns
parent
c616327c
Changes
5
Show whitespace changes
Inline
Side-by-side
Showing
5 changed files
with
31 additions
and
37 deletions
+31
-37
app/models/hooks/web_hook.rb
app/models/hooks/web_hook.rb
+0
-34
changelogs/unreleased/52367-cleanup-web-hooks-columns.yml
changelogs/unreleased/52367-cleanup-web-hooks-columns.yml
+5
-0
db/post_migrate/20181008145341_steal_encrypt_columns.rb
db/post_migrate/20181008145341_steal_encrypt_columns.rb
+15
-0
db/post_migrate/20181008145359_remove_web_hooks_token_and_url.rb
..._migrate/20181008145359_remove_web_hooks_token_and_url.rb
+10
-0
db/schema.rb
db/schema.rb
+1
-3
No files found.
app/models/hooks/web_hook.rb
View file @
ff9881d9
...
@@ -37,38 +37,4 @@ class WebHook < ActiveRecord::Base
...
@@ -37,38 +37,4 @@ class WebHook < ActiveRecord::Base
def
allow_local_requests?
def
allow_local_requests?
false
false
end
end
# In 11.4, the web_hooks table has both `token` and `encrypted_token` fields.
# Ensure that the encrypted version always takes precedence if present.
alias_method
:attr_encrypted_token
,
:token
def
token
attr_encrypted_token
.
presence
||
read_attribute
(
:token
)
end
# In 11.4, the web_hooks table has both `token` and `encrypted_token` fields.
# Pending a background migration to encrypt all fields, we should just clear
# the unencrypted value whenever the new value is set.
alias_method
:'attr_encrypted_token='
,
:'token='
def
token
=
(
value
)
self
.
attr_encrypted_token
=
value
write_attribute
(
:token
,
nil
)
end
# In 11.4, the web_hooks table has both `url` and `encrypted_url` fields.
# Ensure that the encrypted version always takes precedence if present.
alias_method
:attr_encrypted_url
,
:url
def
url
attr_encrypted_url
.
presence
||
read_attribute
(
:url
)
end
# In 11.4, the web_hooks table has both `url` and `encrypted_url` fields.
# Pending a background migration to encrypt all fields, we should just clear
# the unencrypted value whenever the new value is set.
alias_method
:'attr_encrypted_url='
,
:'url='
def
url
=
(
value
)
self
.
attr_encrypted_url
=
value
write_attribute
(
:url
,
nil
)
end
end
end
changelogs/unreleased/52367-cleanup-web-hooks-columns.yml
0 → 100644
View file @
ff9881d9
---
title
:
Remove legacy unencrypted webhook columns from the database
merge_request
:
22199
author
:
type
:
changed
db/post_migrate/20181008145341_steal_encrypt_columns.rb
0 → 100644
View file @
ff9881d9
class
StealEncryptColumns
<
ActiveRecord
::
Migration
include
Gitlab
::
Database
::
MigrationHelpers
DOWNTIME
=
false
disable_ddl_transaction!
def
up
Gitlab
::
BackgroundMigration
.
steal
(
'EncryptColumns'
)
end
def
down
# no-op
end
end
db/post_migrate/20181008145359_remove_web_hooks_token_and_url.rb
0 → 100644
View file @
ff9881d9
class
RemoveWebHooksTokenAndUrl
<
ActiveRecord
::
Migration
include
Gitlab
::
Database
::
MigrationHelpers
DOWNTIME
=
false
def
change
remove_column
:web_hooks
,
:token
,
:string
remove_column
:web_hooks
,
:url
,
:string
,
limit:
2000
end
end
db/schema.rb
View file @
ff9881d9
...
@@ -11,7 +11,7 @@
...
@@ -11,7 +11,7 @@
#
#
# It's strongly recommended that you check this file into your version control system.
# It's strongly recommended that you check this file into your version control system.
ActiveRecord
::
Schema
.
define
(
version:
2018100
2172433
)
do
ActiveRecord
::
Schema
.
define
(
version:
2018100
8145359
)
do
# These are extensions that must be enabled in order to support this database
# These are extensions that must be enabled in order to support this database
enable_extension
"plpgsql"
enable_extension
"plpgsql"
...
@@ -2256,7 +2256,6 @@ ActiveRecord::Schema.define(version: 20181002172433) do
...
@@ -2256,7 +2256,6 @@ ActiveRecord::Schema.define(version: 20181002172433) do
add_index
"web_hook_logs"
,
[
"web_hook_id"
],
name:
"index_web_hook_logs_on_web_hook_id"
,
using: :btree
add_index
"web_hook_logs"
,
[
"web_hook_id"
],
name:
"index_web_hook_logs_on_web_hook_id"
,
using: :btree
create_table
"web_hooks"
,
force: :cascade
do
|
t
|
create_table
"web_hooks"
,
force: :cascade
do
|
t
|
t
.
string
"url"
,
limit:
2000
t
.
integer
"project_id"
t
.
integer
"project_id"
t
.
datetime
"created_at"
t
.
datetime
"created_at"
t
.
datetime
"updated_at"
t
.
datetime
"updated_at"
...
@@ -2269,7 +2268,6 @@ ActiveRecord::Schema.define(version: 20181002172433) do
...
@@ -2269,7 +2268,6 @@ ActiveRecord::Schema.define(version: 20181002172433) do
t
.
boolean
"note_events"
,
default:
false
,
null:
false
t
.
boolean
"note_events"
,
default:
false
,
null:
false
t
.
boolean
"enable_ssl_verification"
,
default:
true
t
.
boolean
"enable_ssl_verification"
,
default:
true
t
.
boolean
"wiki_page_events"
,
default:
false
,
null:
false
t
.
boolean
"wiki_page_events"
,
default:
false
,
null:
false
t
.
string
"token"
t
.
boolean
"pipeline_events"
,
default:
false
,
null:
false
t
.
boolean
"pipeline_events"
,
default:
false
,
null:
false
t
.
boolean
"confidential_issues_events"
,
default:
false
,
null:
false
t
.
boolean
"confidential_issues_events"
,
default:
false
,
null:
false
t
.
boolean
"repository_update_events"
,
default:
false
,
null:
false
t
.
boolean
"repository_update_events"
,
default:
false
,
null:
false
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment