| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2024-06-09 | docs: remove 'came_from' from login view | Tres Seaver | |
| - The narrative doesn't discuss this (mis-)feature. - Without any authorization, there is no meaninful reason to remember the 'previous' page. - As a general rule, we want to avoid trusting user-supplied data (i.e., from the query string or form params) when constructing redirect URLs. | |||
| 2020-10-13 | Rename `ISecurityPolicy.authenticated_identity` to `identity` | Theron Luhn | |
| 2019-12-31 | change hashalg on AuthTktCookieHelper to sha512. | Michael Merickel | |
| 2019-12-30 | rename identify(request) to authenticated_identity(request) | Michael Merickel | |
| 2019-12-29 | update authentication and authorization chapters of the quick_tutorial to ↵ | Michael Merickel | |
| use the new ISecurityPolicy | |||
| 2018-10-08 | Fix comments in `setup.py`s | Steve Piercy | |
| 2018-10-08 | Revise `setup.py`s | Steve Piercy | |
| 2018-10-08 | Update all the `setup.py`s | Steve Piercy | |
| 2018-10-07 | Carry forward previous setup.py changes. | Steve Piercy | |
| 2018-05-15 | issue #3182 removed extra lines from previous PR | Radu Revutchi | |
| 2018-05-14 | fixed issue #3182 - alphabetized dependencies in quick tutorial and aligned ↵ | Radu Revutchi | |
| emphasize-lines | |||
| 2017-11-03 | views.py: prevent exception on unknown user login | silum | |
| Attempting authentication without specifying a login, or when the login is not known, causes an unhandled exception to be raised in `security.py` because `None` is passed to `check_password()` as the hashed password to check against. | |||
| 2017-10-21 | Quick Tutorial: Replace wsgiref with waitress | Chris Shenton | |
| In setup.py add waitress import. In development.ini use waitress. Adjust line number highlighting. Mention that we're using it early in the tutorial. Addresses #2926 | |||
| 2017-01-26 | undo borkage: wsgiref does not use listen, it uses port | Steve Piercy | |
| - ref: #2919 | |||
| 2016-12-09 | Added configuration for ipv6 in .ini files. | Martin | |
| 2016-12-07 | Changed 'host' and 'port' configuration to a new 'listen' style that is now ↵ | Martin | |
| supported by waitress server. | |||
| 2016-12-06 | Revert "Changed 'host' and 'port' configuration to a new 'listen' style that ↵ | Bert JW Regeer | |
| …" | |||
| 2016-12-06 | Changed 'host' and 'port' configuration to a new 'listen' style that is now ↵ | Martin | |
| supported by waitress server. | |||
| 2016-07-21 | Add one-way password hash to security example in Quick Tutorial. | Keith Yang | |
| 2015-05-23 | correct title tag; punctuation | Steve Piercy | |
| 2014-03-13 | Strip redundant logging config from tutorial INI files. | Tres Seaver | |
| Leave it for the 'logging' and 'scaffolds' sections, where it is germane. | |||
| 2013-11-09 | undeprecate remember/forget functions and remove ↵ | Chris McDonough | |
| remember_userid/forget_userid methods from request | |||
| 2013-10-30 | convert remember/forget to request-method-based | Chris McDonough | |
| 2013-09-25 | Get pyramid_chameleon added to the quick tutorial, plus some other fixes for ↵ | Paul Everitt | |
| Python 3. | |||
| 2013-09-13 | First cut at import of quick tutorial. | Paul Everitt | |
