pyramid/docs/quick_tutorial/authorization/tutorial, branch main

fix: store 'came_from' information in the session

2024-06-10T01:11:38+00:00

- As with the previous commit, we want to avoid trusting user-supplied data
  from the query string or form parameters when constructing redirect URLs.

- Storing the route name and matchdict for the view being forbidden in
  the session allows us to construct the redirect URL on successful
  login cleanly.

- In order to clarify that the logic of storing the 'came from'
  information is separate from rendering or processing the login form,
  this PR splits the `@forbidden_view` mapping onto a separate view function.

Rename `ISecurityPolicy.authenticated_identity` to `identity`

2020-10-14T06:08:00+00:00

inheriting from `object` not necessary in py3

2020-04-17T19:12:06+00:00

update docs with pyramid.authorizatio imports after syncing master

2020-01-16T16:34:45+00:00

change hashalg on AuthTktCookieHelper to sha512.

2019-12-31T22:40:17+00:00

rename identify(request) to authenticated_identity(request)

2019-12-30T19:29:25+00:00

update authentication and authorization chapters of the quick_tutorial to use the new ISecurityPolicy

2019-12-30T05:33:51+00:00

views.py: prevent exception on unknown user login

2017-11-03T17:31:43+00:00

Add one-way password hash to security example in Quick Tutorial.

2016-07-21T15:06:38+00:00

correct title tag; grammar, punctuation

2015-05-23T22:29:06+00:00