summaryrefslogtreecommitdiff
path: root/docs/quick_tutorial/authorization.rst
AgeCommit message (Collapse)Author
2024-06-09fix: store 'came_from' information in the sessionTres Seaver
- As with the previous commit, we want to avoid trusting user-supplied data from the query string or form parameters when constructing redirect URLs. - Storing the route name and matchdict for the view being forbidden in the session allows us to construct the redirect URL on successful login cleanly. - In order to clarify that the logic of storing the 'came from' information is separate from rendering or processing the login form, this PR splits the `@forbidden_view` mapping onto a separate view function.
2019-12-31apply grammar suggestionMichael Merickel
2019-12-29update authentication and authorization chapters of the quick_tutorial to ↵Michael Merickel
use the new ISecurityPolicy
2018-08-18Clean up code-blocks in qt/authorizationSteve Piercy
2016-04-16quick_tutorial cleanupSteve Piercy
- replace nose with pytest - cleanup authorization.rst
2016-04-07- update authorization.rstSteve Piercy
- add intersphinx target links
2015-08-31move extra credit question about @forbidden_view_config from authentication ↵Steve Piercy
to authorization
2015-05-23correct title tag; grammar, punctuationSteve Piercy
2015-05-11Update authorization.rstAreski Belaid
fix the url for hello route '/howdy'
2013-09-25Quick Tutorial: Improve the setup instructions (adapted from Steve Piercy's ↵Paul Everitt
work), particularly for Windows. Change all the steps to use $VENV/bin prefixes on commands (don't presume that they have done source env/bin/activate).
2013-09-16make example links clickable, for convenienceTshepang Lekhonkhobe
2013-09-16s/env/venv just for sake of consistencyTshepang Lekhonkhobe
2013-09-13Fix naming of virtualenv prefix.Paul Everitt
2013-09-13All the references re-wired.Paul Everitt
2013-09-13First cut at import of quick tutorial.Paul Everitt