Redmine

    login_options = [["--- #{l(:actionview_instancetag_blank_option)} ---", '']]

    login_options << [l("repository_login_usernamepassword"), 0] 

    login_options << [l("repository_login_current_username"), 1] 

    login_options << [l("repository_login_current_role"), 2] 

    content_tag('p', form.text_field(:url, :size => 60, :required => true,

                     :disabled => !repository.safe_attribute?('url')) +

                     '<br />'.html_safe +

                     '(file:///, http://, https://, svn://, svn+[tunnelscheme]://)') +

    content_tag('p', form.text_field(:root_url, :size => 60) +

                     '<br />(this needs to be set to the to the highest level in the SVN tree allowed if not the URL)') +

    content_tag('p', form.select(:login_method, login_options)) +

    content_tag('p', form.text_field(:login, :size => 30)) +

    content_tag('p', form.password_field(

                     :password, :size => 30, :name => 'ignore',

                     :value => ((repository.new_record? || repository.password.blank?) ? '' : ('x'*15)),

                     :onfocus => "this.value=''; this.name='repository[password]';",

                     :onchange => "this.name='repository[password]';")) +

    content_tag('p', form.password_field(:security_token, :size => 30, :name => 'ignore',

                     :value => ((repository.new_record? || repository.security_token.blank?) ? '' : ('x'*15)),

                     :onfocus => "this.value=''; this.name='repository[security_token]';",

                     :onchange => "this.name='repository[security_token]';"))

#  select_tag('login_method', options_for_select(login_method, repository.class.name.demodulize),

#                     :onchange => remote_function(:url => { :controller => 'repositories', :action => 'edit', :id => @project }, :method => :get, :with => "Form.serialize(this.form)") ) +

      @scm = self.scm_adapter.new(url, root_url, login, password, path_encoding, login_method, security_token, project)

  #attr_protected :root_url

package Apache::Redmine;

=head1 Apache::Redmine

In addition this module allows to authenticate a redmine server

for webdav subversion access, bypassing full authentication, still

allowing to apply repository based security (e.g. .authz files)

   ## eg:  /usr/lib/perl5/Apache/Redmine.pm

   PerlLoadModule Apache::Redmine

     PerlAccessHandler Apache::Redmine::access_handler

     PerlAuthenHandler Apache::Redmine::authen_handler

     AuthType Basic

     AuthName redmine

     Require valid-user

     PerlAccessHandler Apache::Redmine::redmine_access_handler

     PerlAuthenHandler Apache::Redmine::redmine_authen_handler

     RedmineSecurityToken "redmine"

    name => 'RedmineSecurityToken',

    req_override => OR_AUTHCFG,

    args_how => TAKE1,

    errmsg => 'RedmineSecurityToken additional authentication token',

  },  {

sub RedmineSecurityToken { set_val('RedmineSecurityToken', @_); }

      $r->log_reason("Apache::Redmine - No authentication has been configured in webserver (access_handler)");

sub redmine_access_handler {

  my $r = shift;

  unless ($r->some_auth_required) {

      $r->log_reason("Apache::Redmine - No auth has been configured in vhost conf (redmine_access_handler)");

      return FORBIDDEN;

  }

  my $method = $r->method;

  return OK unless defined $read_only_methods{$method};

  my $project_id = get_project_identifier($r);

  $r->set_handlers(PerlAuthenHandler => [\&OK])

      if is_public_project($project_id, $r);

  return OK

}

sub redmine_authen_handler {

  my $r = shift;

  my ($res, $redmine_pass) =  $r->get_basic_auth_pw();

  return $res unless $res == OK;

  my $cfg = Apache2::Module::get_config(__PACKAGE__, $r->server, $r->per_dir_config);

  if ($cfg->{RedmineSecurityToken}) {

    my $securityToken = $cfg->{RedmineSecurityToken};

    if ($securityToken ne $redmine_pass) {

      $r->log_error("Apache::Redmine - Provided SecurityToken did not match (redmine_authen_handler)");

      $r->note_auth_failure();

      return AUTH_REQUIRED; 

    }    

  }  

  return OK;

}

class AddSpecialRepositorySecurity < ActiveRecord::Migration

  def self.down

    remove_column :repositories, :login_method

    remove_column :repositories, :security_token

  end

  def self.up

    add_column :repositories, :login_method, :int, :default => 0, :null => true

    add_column :repositories, :security_token, :string, :limit => 60, :default => "", :null => true

  end

end

  field_login_method: Authentication method

  field_security_token: Security token

  field_root_url: Root URL

  repository_login_usernamepassword: Provided credentials

  repository_login_current_username: Name of current user

  repository_login_current_role: Role of current user

  field_login_method: Authentication method

  field_security_token: Security token

  field_root_url: Root URL

  repository_login_usernamepassword: Provided credentials

  repository_login_current_username: Name of current user

  repository_login_current_role: Role of current user

          if !(User.current.is_a?(AnonymousUser))

            if (@login_method == 1)

              str = ''

              str << " --username #{shell_quote(User.current.login)}"

              str << " --password #{shell_quote( (@security_token.blank? ? "foo" : @security_token) )}"   

            end

            if (@login_method == 2) && (!@project.nil?)

              role = User.current.role_for_project(@project)

              if !role.blank?

                str = ''

                str << " --username #{shell_quote(role.name)}"

                str << " --password #{shell_quote( (@security_token.blank? ? "foo" : @security_token) )}"   

              end

            end

          end

          if (str.blank?)

            str = ''

            str << " --username #{shell_quote(@login)}" unless @login.blank?

            str << " --password #{shell_quote(@password)}" unless @login.blank? || @password.blank?

          end

        def initialize(url, root_url=nil, login=nil, password=nil, path_encoding=nil, login_method=nil, security_token=nil, project=nil)

          @login_method = login_method.blank? ? 0 : login_method

          @security_token = security_token.blank? ? "" : security_token

          @project = project

        def use_current_user

          @use_current_user

        end