summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2013-10-27Security APIs on pyramid.request.RequestMatt Russell
The pyramid.security Authorization API function has_permission is made available on the request. The pyramid.security Authentication API functions are now available as properties (unauthenticated_userid, authenticated_userid, effective_principals) and methods (remember_userid, forget_userid) on pyramid.request.Request. Backwards compatibility: For each of the APIs moved to request method or property, the original API in the pyramid.security module proxies to the request. Reworked tests to check module level b/c wrappers call through to mixins for each API. Tests that check no reg on request now do the right thing. Use a response callback to set the request headers for forget_userid and remember_userid. Update docs. Attempt to improve a documentation section referencing the pyramid.security.has_permission function in docs/narr/resources.rst Ensures backwards compatiblity for `pyramid.security.forget` and `pyramid.security.remember`.
2013-10-23Merge branch 'fix.view-defaults-on-notfound-and-forbidden-views'Chris McDonough
2013-10-22update changelogMichael Merickel
2013-10-20notfound and forbidden decorators were ignoring view_defaultsMichael Merickel
This could be fixed in other ways but the basic problem is that because config.add_notfound_view and config.add_forbidden_view have actual signatures instead of *args, **kwargs, the arguments are squashing the view_defaults which are applied later on the call to config.add_view. Basically, by the time the args get to config.add_view, they look explicit when they are not. fix #1173
2013-10-20Merge branch 'fix.renderer-interfaces'Chris McDonough
2013-10-20fix merge conflict and prevent warning from showing up during testing (dont ↵Chris McDonough
import ITemplateRenderer)
2013-10-20add a note so we can defend the choice laterChris McDonough
2013-10-20Merge branch 'fix.basic-authentication-encodings'Chris McDonough
2013-10-20Merge branch 'master' into fix.basic-authentication-encodingsChris McDonough
2013-10-20Merge branch 'feature.bad-csrf-token-exception'Chris McDonough
2013-10-20fix merge conflictChris McDonough
2013-10-20Merge branch 'feature.signed-cookie-session'Chris McDonough
2013-10-20rewording about deprecation and cookie compatibilityChris McDonough
2013-10-19remove unnecessary length check, slices are magicMichael Merickel
2013-10-19moar typosMichael Merickel
2013-10-19remove redundant "see"Michael Merickel
2013-10-19monChris McDonough
2013-10-19add admonishment against secret sharingChris McDonough
2013-10-19use zope.deprecation for warning about the ↵Chris McDonough
UnencryptedCookieSessionFactoryConfig deprecation (it will happen at import time, rather than usage time, which is good for tests); add a few sphinx directives for deprecated and versionadded
2013-10-19link to the public renderer interfacesMichael Merickel
2013-10-19modify the docs for the renderer interfacesMichael Merickel
2013-10-19fix tests on py3Michael Merickel
2013-10-19update changelogMichael Merickel
2013-10-19attempt to decode basic header as utf-8 and fallback to latin-1Michael Merickel
fixes #898 fixes #904
2013-10-19Merge branch 'master' of Cuidightheach/pyramid into ↵Michael Merickel
fix.basic-authentication-encodings
2013-10-19Merge branch 'master' into feature.signed-cookie-sessionMichael Merickel
2013-10-19reference github issuesMichael Merickel
2013-10-19update doc referencesMichael Merickel
2013-10-19move HTTPBadCSRFToken to p.exceptions.BadCSRFTokenMichael Merickel
2013-10-19Merge branch 'check_csrf_token' of kpinc/pyramid into ↵Michael Merickel
feature.bad-csrf-token-exception
2013-10-19update the docsMichael Merickel
2013-10-19updated changelogMichael Merickel
2013-10-19fix tests on python 3Michael Merickel
2013-10-19add deprecation for old cookie factoryMichael Merickel
2013-10-19update session to use a static salt and separate serialize funcsMichael Merickel
2013-10-18Merge branch 'master' of github.com:Pylons/pyramidChris McDonough
2013-10-17fix documentation for csrf checkingMichael Merickel
2013-10-14Address #866; don't run the tests when the docs build, this means that 'make ↵Chris McDonough
html' must be run using a SPHINXBUILD=/path/to/virtualenv/with/pyramid
2013-10-14temporarily dont run tests to see impact on readthedocsChris McDonough
2013-10-14make these tests pass on python 3.2+Chris McDonough
2013-10-14Revert "make these tests pass on python 3.2+"Chris McDonough
This reverts commit cd218d2934c87260bbb10620e3b419b275fe6244.
2013-10-14make these tests pass on python 3.2+Chris McDonough
2013-10-14add note about custom args to python when using command-line scriptsChris McDonough
2013-10-14Merge branch 'master' of github.com:Pylons/pyramidChris McDonough
2013-10-11Merge pull request #1157 from tshepang/diffMichael Merickel
some doc fixes/improvements
2013-10-11docs: typosTshepang Lekhonkhobe
2013-10-11docs: capitaliseTshepang Lekhonkhobe
2013-10-11docs: rm redundancyTshepang Lekhonkhobe
2013-10-09Merge pull request #1152 from Pylons/feature.run-scripts-directlyChris McDonough
run console scripts directly
2013-10-09Merge remote-tracking branch 'origin/master'Paul Everitt