{"push_id":1460106057,"size":10,"distinct_size":6,"ref":"refs/heads/master","head":"09a8f59cb83fe6342eedae56fb76eeb4a55d18a7","before":"d3c580f110ca03530328d3f6c32b815188f31307","commits":[{"sha":"3895e0c7e930e9f7d6352cc9898a3f773d601e33","author":{"name":"Bill Dueber","email":"7d8fb5221dddb30ca0738503eceb5dce85cfc989@dueber.com"},"message":"Quiet asset logging in production","distinct":false,"url":"https://api.github.com/repos/billdueber/umrdr/commits/3895e0c7e930e9f7d6352cc9898a3f773d601e33"},{"sha":"a7a8d5d256917075dc12102eaa625b50df8d4e9f","author":{"name":"Bill Dueber","email":"7d8fb5221dddb30ca0738503eceb5dce85cfc989@dueber.com"},"message":"Added and configured ClamAV for virus checking","distinct":false,"url":"https://api.github.com/repos/billdueber/umrdr/commits/a7a8d5d256917075dc12102eaa625b50df8d4e9f"},{"sha":"2d547545270fa4975541a503420bb00e9a3188af","author":{"name":"Bill Dueber","email":"7d8fb5221dddb30ca0738503eceb5dce85cfc989@dueber.com"},"message":"Attempt to guard against Travis getting confused building ClamAV","distinct":false,"url":"https://api.github.com/repos/billdueber/umrdr/commits/2d547545270fa4975541a503420bb00e9a3188af"},{"sha":"4bde68825e251cd23f66faf00fdfac0836c61046","author":{"name":"Bill Dueber","email":"7d8fb5221dddb30ca0738503eceb5dce85cfc989@dueber.com"},"message":"Tell travis even more strongly to not build ClamAV","distinct":false,"url":"https://api.github.com/repos/billdueber/umrdr/commits/4bde68825e251cd23f66faf00fdfac0836c61046"},{"sha":"283026b7740f8fdc9ff9264f618b76ddd7f3608e","author":{"name":"Nabeela Jaffer","email":"f35adb06303ba63aa613bb600b0844db49d07724@users.noreply.github.com"},"message":"Merge pull request #536 from billdueber/quiet_assets\n\nQuiet asset logging in production","distinct":true,"url":"https://api.github.com/repos/billdueber/umrdr/commits/283026b7740f8fdc9ff9264f618b76ddd7f3608e"},{"sha":"f3b6dd38c4411166f86b5805069c23d799942e32","author":{"name":"Nabeela Jaffer","email":"f35adb06303ba63aa613bb600b0844db49d07724@users.noreply.github.com"},"message":"Merge pull request #535 from billdueber/fixup/523_run_clamav\n\nAdded and configured ClamAV for virus checking","distinct":true,"url":"https://api.github.com/repos/billdueber/umrdr/commits/f3b6dd38c4411166f86b5805069c23d799942e32"},{"sha":"748ac293504f72bcde318185a4ab6629b0d1212c","author":{"name":"Blanco","email":"39c4ed0c86e0b61af44f30e4f29096892288d68b@158.128-25.43.211.141.in-addr.arpa"},"message":"make checkbox work.","distinct":true,"url":"https://api.github.com/repos/billdueber/umrdr/commits/748ac293504f72bcde318185a4ab6629b0d1212c"},{"sha":"07aaa8981c319df030d6d6d2d7a58252f6d37f9a","author":{"name":"Nabeela Jaffer","email":"f35adb06303ba63aa613bb600b0844db49d07724@users.noreply.github.com"},"message":"Merge pull request #534 from blancoj/checkbox\n\nadd javascript to disable/enable the start upload button. This is a fix for the current interface. Once Sufia gem is updated, the 'start upload' button will not exist any more","distinct":true,"url":"https://api.github.com/repos/billdueber/umrdr/commits/07aaa8981c319df030d6d6d2d7a58252f6d37f9a"},{"sha":"808fc87f554de9ac2f39a6102cc6d932e25b0c6a","author":{"name":"Noah Botimer","email":"d423726ad771a442c7e9e4c1b08008c23cb9e2a4@umich.edu"},"message":"Fix up remaining logout/flash issues (#454)\n\nFixes #393\nFixes #454\nFixes #463\n\n * Add secure flag for proper cookie deletion\n * Clear session and flash on logout\n * Add a Warden after_authentication block to clear the flash on login\n * Add debug logging for various authentication events\n\nThis is still not perfect in that it does not detect if the REMOTE_USER\nchanges while the Cosign cookie has not timed out. This could happen if\nsomeone logs out through another window, logs in as another user, and\nthen refreshes or clicks a link. The Rails session will persist with the\nold identity.\n\nThe reason this change does not address that issue is that, because of\nthe way Devise works and the strategy is implemented, the notion of the\nREMOTE_USER is not visible at the controller layer, which has the filter\nto check for a missing user (and terminate the session).\n\nThe solution to this is to pull the knowledge of how to determine the\nREMOTE_USER for the request out of the Devise layer, and use it from\nboth the strategy and the controller. Then, the Warden authentication\nevent can set the remote user or SSO session ID in the Rails session,\nand the filter can check whether the user value has changed. I decided\nthat this was a larger change than I wanted to make for the base issue.\nIt can be taken up as another issue to improve the edge case behavior.","distinct":true,"url":"https://api.github.com/repos/billdueber/umrdr/commits/808fc87f554de9ac2f39a6102cc6d932e25b0c6a"},{"sha":"09a8f59cb83fe6342eedae56fb76eeb4a55d18a7","author":{"name":"Bill Dueber","email":"7d8fb5221dddb30ca0738503eceb5dce85cfc989@dueber.com"},"message":"Merge pull request #538 from mlibrary/454-cosign-flash\n\nFix up remaining logout/flash issues (#454)\r\n\r\nFixes #393\r\nFixes #454\r\nFixes #463\r\n\r\n> This could happen if\r\n> someone logs out through another window, logs in as another user, and\r\n> then refreshes or clicks a link. The Rails session will persist with the\r\n> old identity.\r\n\r\nI think we can call that enough of an edge case to not worry about for right now. Merging.","distinct":true,"url":"https://api.github.com/repos/billdueber/umrdr/commits/09a8f59cb83fe6342eedae56fb76eeb4a55d18a7"}]}
{"actor":{"display_login":"billdueber"}}