summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-12-26add changelog for #3553Michael Merickel
2019-12-26fix imp deprecationMichael Merickel
2019-12-26Merge pull request #3550 from mmerickel/moar-security-policyMichael Merickel
security policy docs and legacy policy improvements
2019-12-24add "of the documentation" pointer to deprecation warningsMichael Merickel
2019-12-24alphabetizeMichael Merickel
2019-12-24security policy docs and legacy policy improvementsMichael Merickel
- Added `set_security_policy`` to more places in the docs. - Ensure that the authn/authz policies are not used at all if the legacy policy is not in effect to avoid edge cases where the code would skip the security policy and use the authn/authz policy on accident. - Change deprecation warnings in code to reference the docs by name instead of by URL.
2019-12-23Merge pull request #3545 from luhn/authenticated-useridMichael Merickel
Security policy changes
2019-12-23Merge branch 'master' into luhn-authenticated-useridMichael Merickel
2019-12-23fix links in docs to cookiecutterMichael Merickel
2019-12-23add coverage tests for deprecation warningsMichael Merickel
2019-12-23modify deprecation warningMichael Merickel
2019-12-23update changelog for #3547Michael Merickel
2019-12-23Merge pull request #3547 from mmerickel/min-py36-add-py38Michael Merickel
set the minimum supported version at py35
2019-12-23restore py35Michael Merickel
2019-12-23Update tox.iniMichael Merickel
Co-Authored-By: Steve Piercy <web@stevepiercy.com>
2019-12-23Merge pull request #9 from stevepiercy/min-py36-add-py38Michael Merickel
Update docs and setup.py, remove py35, py36, add py38
2019-12-17Use `self.identify` instead of `request.authenticated_identity`Theron Luhn
2019-12-17Improve docs for remember/forget.Theron Luhn
2019-12-17Remove `identity` from authenticated_userid interface.Theron Luhn
2019-12-16Update docs/narr/security.rst code examples.Theron Luhn
2019-12-16Fix EffectivePrincipalsPredicate deprecation warning.Theron Luhn
Fired upon registering, not upon use.
2019-12-15Remove Python 3.4, Python 3.5, and add Python 3.8Steve Piercy
2019-12-15Merge branch 'min-py36-add-py38' of https://github.com/mmerickel/pyramid ↵Steve Piercy
into min-py36-add-py38
2019-12-15Fix coverage.Theron Luhn
2019-12-15Remove requirement that identity is validated.Theron Luhn
2019-12-15Fix coverage.Theron Luhn
2019-12-15Fix whatsnew.Theron Luhn
2019-12-15Revert "Bring back identity into permits."Theron Luhn
This reverts commit 2e06fa414412688dc3b7e0b422b0fc0b96ec882f.
2019-12-15set the minimum supported version at py36Michael Merickel
2019-12-15fix failing testMichael Merickel
2019-12-15fix lintMichael Merickel
2019-12-15handle a missing content negotiation case where the unencoded option is not ↵Michael Merickel
available and the client requests an encoded variant that doesn't exist
2019-12-15Merge pull request #3537 from mmerickel/negotiate-static-encodingMichael Merickel
negotiate the best static asset using supported encodings
2019-12-15Four spaces of indentation.Theron Luhn
2019-12-15Update docs/narr/security.rstTheron Luhn
Co-Authored-By: Steve Piercy <web@stevepiercy.com>
2019-12-14Fix coverage.Theron Luhn
2019-12-14Fix coverage.Theron Luhn
2019-12-14Bring back identity into permits.Theron Luhn
2019-12-14Update docs.Theron Luhn
2019-12-14Remove TODO for authentication tutorial.Theron Luhn
It should be done, but not as part of this PR. I'll open an issue.
2019-12-14Remove unnecessary TODO statement.Theron Luhn
2019-12-14Fix couple final view tests.Theron Luhn
2019-12-14Fix tests for `DummySecurityPolicy`.Theron Luhn
2019-12-14Raise error on kwargs in `LegacySecurityPolicy.forget`.Theron Luhn
2019-12-14Don't test request.authenticated_userid stringifies the result.Theron Luhn
2019-12-14Bring back `identify` to `LegacySecurityPolicy`.Theron Luhn
2019-12-14Correct implementation of Request.unauthenticated_userid.Theron Luhn
New implementation was not backwards compatible. This brings back the old implementation, except changing to pull from ISecurityPolicy.authenticated_userid when applicable. Also undeprecated the method again.
2019-12-14Remove failing tests using threadlocal request.Theron Luhn
It shoud be okay to remove because threadlocal support was removed from the security implementation. However, *I don't understand why they started failing.* In master, `get_current_registry` returns a registry object, which DummyRequest will fall back on, causing the tests to pass and rendering them useless. On this branch, it returns `None`, causing the tests to fail. I can't find any reason in the diff why this would change. This makes me nervous.
2019-12-14Fix security policy integration tests.Theron Luhn
2019-12-14Fix tests for `SesssionAuthenticationHelper`Theron Luhn
generated by cgit v1.2.3 (git 2.25.1) at 2026-01-29 13:13:53 +0000