| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2016-05-23 | Merge pull request #2601 from stevepiercy/1.7-branch | Steve Piercy | |
| revert column type change in alchemy scaffold and related docs | |||
| 2016-05-22 | Change type to Text from Integer. See #2591 | Steve Piercy | |
| 2016-05-20 | Change column `Page.data` to `Text` | viniciusban | |
| 2016-05-19 | oops, encode the password in the authorization tutorial as well | Michael Merickel | |
| 2016-05-15 | password_hash is unicode, needs to be encoded | Michael Merickel | |
| 2016-04-12 | - use an environment variable and venv. See ↵ | Steve Piercy | |
| https://github.com/Pylons/pyramid/pull/2468#discussion_r59311019 - rename stanza from `testing_extras` to `tests_require` - switch from nose to pytest | |||
| 2016-04-11 | remove theme.min.css, it serves no purpose | Michael Merickel | |
| 2016-04-11 | fix readme to show directions in both alchemy and zodb | Michael Merickel | |
| 2016-04-11 | tweak wiki2 test to be more succinct | Steve Piercy | |
| 2016-04-09 | use an alias for the import. Fixes #2450. Thanks @bertjwregeer! | Steve Piercy | |
| 2016-04-09 | - update wiki2/tests step | Steve Piercy | |
| 2016-04-09 | - update wiki2/authorization step | Steve Piercy | |
| 2016-04-09 | - fix straggler from wiki2/src/views/tutorial/tests.py | Steve Piercy | |
| 2016-04-09 | - update wiki2/authentication | Steve Piercy | |
| 2016-04-09 | - update wiki2 definingviews | Steve Piercy | |
| 2016-04-09 | - update definingmodels step | Steve Piercy | |
| 2016-04-09 | - update wiki2/src/basiclayout files | Steve Piercy | |
| 2016-04-09 | - add missing files | Steve Piercy | |
| 2016-04-09 | add result of installation step in wiki2 tutorial, but using the recently ↵ | Steve Piercy | |
| updated scaffold from master and normalize its version to 1.7. See #2104. | |||
| 2016-02-28 | redirect to edit page when user attempts to add page that already exists | Steve Piercy | |
| - update src/*/views/default.py - update src/*/routes.py - write new test - revise docs, double-checking line counts and highlighting | |||
| 2016-02-28 | apply change to all src/*/user.py | Steve Piercy | |
| 2016-02-28 | wiki2 revert unnecessary hmac stuff | Steve Piercy | |
| 2016-02-27 | wiki2 authentication bug fix and improvement against timing attack | Steve Piercy | |
| - Bytes type does not have encode method. The expected_hash retrieved from the database is a bytes object. - Use hmac.compare_digest instead of == to avoid timing attacks as a recommended security best practice. See https://www.python.org/dev/peps/pep-0466/ https://bugs.python.org/issue21306 and https://codahale.com/a-lesson-in-timing-attacks/ for details. Note, however, this was not backported to py2.6. For a tutorial, I am OK with stating this will not work on Python 2.6 with a clear warning note at the start of the tutorial and on the authentication step. | |||
| 2016-02-18 | update tests chapter | Michael Merickel | |
| 2016-02-18 | add fallback for next_url | Michael Merickel | |
| 2016-02-18 | add webtest and tests_require to setup.py | Michael Merickel | |
| 2016-02-16 | add first cut at source for authorization chapter | Michael Merickel | |
| 2016-02-16 | remove whitespace | Michael Merickel | |
| 2016-02-16 | use page.name to prepare for context | Michael Merickel | |
| 2016-02-14 | implement the authentication example code | Michael Merickel | |
| 2016-02-14 | split routes into a separate module | Michael Merickel | |
| 2016-02-14 | fix unicode issues with check_password | Michael Merickel | |
| 2016-02-13 | improve the views section by removing quirks and explaining transactions | Michael Merickel | |
| 2016-02-12 | forward port changes to models / scripts to later chapters | Michael Merickel | |
| 2016-02-12 | update the models chapter with the new user model | Michael Merickel | |
| 2016-02-12 | let's go ahead and bite off more than we can chew by adding object-security | Michael Merickel | |
| we'll allow anyone to create pages, not just editors finally we'll allow page creators of pages to edit their pages even if they are not editors | |||
| 2016-02-12 | create an actual user model to prepare for security | Michael Merickel | |
| 2016-02-11 | copy layout and templates from views to authorization | Michael Merickel | |
| 2016-02-10 | move security into one place | Michael Merickel | |
| 2016-02-10 | update 404 templates | Michael Merickel | |
| 2016-02-10 | explain the base layout.jinja2 template and notfound view | Michael Merickel | |
| 2016-02-10 | several simple refactorings | Michael Merickel | |
| - move auth from default.py to auth.py - rename errors to notfound - drop basic templates (mytemplate.jinja2, layout.jinja2) | |||
| 2016-02-10 | split login from forbidden | Michael Merickel | |
| 2016-02-08 | fix functional tests | Michael Merickel | |
| 2016-02-08 | fix jinja2 none test | Michael Merickel | |
| 2016-02-08 | fix tests to get the bind from dbsession_factory properly | Michael Merickel | |
| 2016-02-08 | [wip] update tests in wiki2 tutorial | Michael Merickel | |
| 2016-02-08 | expose the session factory on the registry | Michael Merickel | |
| 2016-02-07 | update authorization chapter of wiki2 tutorial | Michael Merickel | |
| 2016-02-07 | update definingviews chapter of wiki2 tutorial | Michael Merickel | |
