Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
G
gitlab-ce
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
0
Merge Requests
0
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
Boxiang Sun
gitlab-ce
Commits
ff9881d9
Commit
ff9881d9
authored
6 years ago
by
Nick Thomas
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Remove unencrypted webhook token and URL columns
parent
c616327c
Changes
5
Show whitespace changes
Inline
Side-by-side
Showing
5 changed files
with
31 additions
and
37 deletions
+31
-37
app/models/hooks/web_hook.rb
app/models/hooks/web_hook.rb
+0
-34
changelogs/unreleased/52367-cleanup-web-hooks-columns.yml
changelogs/unreleased/52367-cleanup-web-hooks-columns.yml
+5
-0
db/post_migrate/20181008145341_steal_encrypt_columns.rb
db/post_migrate/20181008145341_steal_encrypt_columns.rb
+15
-0
db/post_migrate/20181008145359_remove_web_hooks_token_and_url.rb
..._migrate/20181008145359_remove_web_hooks_token_and_url.rb
+10
-0
db/schema.rb
db/schema.rb
+1
-3
No files found.
app/models/hooks/web_hook.rb
View file @
ff9881d9
...
@@ -37,38 +37,4 @@ class WebHook < ActiveRecord::Base
...
@@ -37,38 +37,4 @@ class WebHook < ActiveRecord::Base
def
allow_local_requests?
def
allow_local_requests?
false
false
end
end
# In 11.4, the web_hooks table has both `token` and `encrypted_token` fields.
# Ensure that the encrypted version always takes precedence if present.
alias_method
:attr_encrypted_token
,
:token
def
token
attr_encrypted_token
.
presence
||
read_attribute
(
:token
)
end
# In 11.4, the web_hooks table has both `token` and `encrypted_token` fields.
# Pending a background migration to encrypt all fields, we should just clear
# the unencrypted value whenever the new value is set.
alias_method
:'attr_encrypted_token='
,
:'token='
def
token
=
(
value
)
self
.
attr_encrypted_token
=
value
write_attribute
(
:token
,
nil
)
end
# In 11.4, the web_hooks table has both `url` and `encrypted_url` fields.
# Ensure that the encrypted version always takes precedence if present.
alias_method
:attr_encrypted_url
,
:url
def
url
attr_encrypted_url
.
presence
||
read_attribute
(
:url
)
end
# In 11.4, the web_hooks table has both `url` and `encrypted_url` fields.
# Pending a background migration to encrypt all fields, we should just clear
# the unencrypted value whenever the new value is set.
alias_method
:'attr_encrypted_url='
,
:'url='
def
url
=
(
value
)
self
.
attr_encrypted_url
=
value
write_attribute
(
:url
,
nil
)
end
end
end
This diff is collapsed.
Click to expand it.
changelogs/unreleased/52367-cleanup-web-hooks-columns.yml
0 → 100644
View file @
ff9881d9
---
title
:
Remove legacy unencrypted webhook columns from the database
merge_request
:
22199
author
:
type
:
changed
This diff is collapsed.
Click to expand it.
db/post_migrate/20181008145341_steal_encrypt_columns.rb
0 → 100644
View file @
ff9881d9
class
StealEncryptColumns
<
ActiveRecord
::
Migration
include
Gitlab
::
Database
::
MigrationHelpers
DOWNTIME
=
false
disable_ddl_transaction!
def
up
Gitlab
::
BackgroundMigration
.
steal
(
'EncryptColumns'
)
end
def
down
# no-op
end
end
This diff is collapsed.
Click to expand it.
db/post_migrate/20181008145359_remove_web_hooks_token_and_url.rb
0 → 100644
View file @
ff9881d9
class
RemoveWebHooksTokenAndUrl
<
ActiveRecord
::
Migration
include
Gitlab
::
Database
::
MigrationHelpers
DOWNTIME
=
false
def
change
remove_column
:web_hooks
,
:token
,
:string
remove_column
:web_hooks
,
:url
,
:string
,
limit:
2000
end
end
This diff is collapsed.
Click to expand it.
db/schema.rb
View file @
ff9881d9
...
@@ -11,7 +11,7 @@
...
@@ -11,7 +11,7 @@
#
#
# It's strongly recommended that you check this file into your version control system.
# It's strongly recommended that you check this file into your version control system.
ActiveRecord
::
Schema
.
define
(
version:
2018100
2172433
)
do
ActiveRecord
::
Schema
.
define
(
version:
2018100
8145359
)
do
# These are extensions that must be enabled in order to support this database
# These are extensions that must be enabled in order to support this database
enable_extension
"plpgsql"
enable_extension
"plpgsql"
...
@@ -2256,7 +2256,6 @@ ActiveRecord::Schema.define(version: 20181002172433) do
...
@@ -2256,7 +2256,6 @@ ActiveRecord::Schema.define(version: 20181002172433) do
add_index
"web_hook_logs"
,
[
"web_hook_id"
],
name:
"index_web_hook_logs_on_web_hook_id"
,
using: :btree
add_index
"web_hook_logs"
,
[
"web_hook_id"
],
name:
"index_web_hook_logs_on_web_hook_id"
,
using: :btree
create_table
"web_hooks"
,
force: :cascade
do
|
t
|
create_table
"web_hooks"
,
force: :cascade
do
|
t
|
t
.
string
"url"
,
limit:
2000
t
.
integer
"project_id"
t
.
integer
"project_id"
t
.
datetime
"created_at"
t
.
datetime
"created_at"
t
.
datetime
"updated_at"
t
.
datetime
"updated_at"
...
@@ -2269,7 +2268,6 @@ ActiveRecord::Schema.define(version: 20181002172433) do
...
@@ -2269,7 +2268,6 @@ ActiveRecord::Schema.define(version: 20181002172433) do
t
.
boolean
"note_events"
,
default:
false
,
null:
false
t
.
boolean
"note_events"
,
default:
false
,
null:
false
t
.
boolean
"enable_ssl_verification"
,
default:
true
t
.
boolean
"enable_ssl_verification"
,
default:
true
t
.
boolean
"wiki_page_events"
,
default:
false
,
null:
false
t
.
boolean
"wiki_page_events"
,
default:
false
,
null:
false
t
.
string
"token"
t
.
boolean
"pipeline_events"
,
default:
false
,
null:
false
t
.
boolean
"pipeline_events"
,
default:
false
,
null:
false
t
.
boolean
"confidential_issues_events"
,
default:
false
,
null:
false
t
.
boolean
"confidential_issues_events"
,
default:
false
,
null:
false
t
.
boolean
"repository_update_events"
,
default:
false
,
null:
false
t
.
boolean
"repository_update_events"
,
default:
false
,
null:
false
...
...
This diff is collapsed.
Click to expand it.
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment