summaryrefslogtreecommitdiff
path: root/docs/tutorials/wiki2/src
AgeCommit message (Collapse)Author
2016-05-23Merge pull request #2601 from stevepiercy/1.7-branchSteve Piercy
revert column type change in alchemy scaffold and related docs
2016-05-22Change type to Text from Integer. See #2591Steve Piercy
2016-05-20Change column `Page.data` to `Text`viniciusban
2016-05-19oops, encode the password in the authorization tutorial as wellMichael Merickel
2016-05-15password_hash is unicode, needs to be encodedMichael Merickel
2016-04-12- use an environment variable and venv. See ↵Steve Piercy
https://github.com/Pylons/pyramid/pull/2468#discussion_r59311019 - rename stanza from `testing_extras` to `tests_require` - switch from nose to pytest
2016-04-11remove theme.min.css, it serves no purposeMichael Merickel
2016-04-11fix readme to show directions in both alchemy and zodbMichael Merickel
2016-04-11tweak wiki2 test to be more succinctSteve Piercy
2016-04-09use an alias for the import. Fixes #2450. Thanks @bertjwregeer!Steve Piercy
2016-04-09- update wiki2/tests stepSteve Piercy
2016-04-09- update wiki2/authorization stepSteve Piercy
2016-04-09- fix straggler from wiki2/src/views/tutorial/tests.pySteve Piercy
2016-04-09- update wiki2/authenticationSteve Piercy
2016-04-09- update wiki2 definingviewsSteve Piercy
2016-04-09- update definingmodels stepSteve Piercy
2016-04-09- update wiki2/src/basiclayout filesSteve Piercy
2016-04-09- add missing filesSteve Piercy
2016-04-09add result of installation step in wiki2 tutorial, but using the recently ↵Steve Piercy
updated scaffold from master and normalize its version to 1.7. See #2104.
2016-02-28redirect to edit page when user attempts to add page that already existsSteve Piercy
- update src/*/views/default.py - update src/*/routes.py - write new test - revise docs, double-checking line counts and highlighting
2016-02-28apply change to all src/*/user.pySteve Piercy
2016-02-28wiki2 revert unnecessary hmac stuffSteve Piercy
2016-02-27wiki2 authentication bug fix and improvement against timing attackSteve Piercy
- Bytes type does not have encode method. The expected_hash retrieved from the database is a bytes object. - Use hmac.compare_digest instead of == to avoid timing attacks as a recommended security best practice. See https://www.python.org/dev/peps/pep-0466/ https://bugs.python.org/issue21306 and https://codahale.com/a-lesson-in-timing-attacks/ for details. Note, however, this was not backported to py2.6. For a tutorial, I am OK with stating this will not work on Python 2.6 with a clear warning note at the start of the tutorial and on the authentication step.
2016-02-18update tests chapterMichael Merickel
2016-02-18add fallback for next_urlMichael Merickel
2016-02-18add webtest and tests_require to setup.pyMichael Merickel
2016-02-16add first cut at source for authorization chapterMichael Merickel
2016-02-16remove whitespaceMichael Merickel
2016-02-16use page.name to prepare for contextMichael Merickel
2016-02-14implement the authentication example codeMichael Merickel
2016-02-14split routes into a separate moduleMichael Merickel
2016-02-14fix unicode issues with check_passwordMichael Merickel
2016-02-13improve the views section by removing quirks and explaining transactionsMichael Merickel
2016-02-12forward port changes to models / scripts to later chaptersMichael Merickel
2016-02-12update the models chapter with the new user modelMichael Merickel
2016-02-12let's go ahead and bite off more than we can chew by adding object-securityMichael Merickel
we'll allow anyone to create pages, not just editors finally we'll allow page creators of pages to edit their pages even if they are not editors
2016-02-12create an actual user model to prepare for securityMichael Merickel
2016-02-11copy layout and templates from views to authorizationMichael Merickel
2016-02-10move security into one placeMichael Merickel
2016-02-10update 404 templatesMichael Merickel
2016-02-10explain the base layout.jinja2 template and notfound viewMichael Merickel
2016-02-10several simple refactoringsMichael Merickel
- move auth from default.py to auth.py - rename errors to notfound - drop basic templates (mytemplate.jinja2, layout.jinja2)
2016-02-10split login from forbiddenMichael Merickel
2016-02-08fix functional testsMichael Merickel
2016-02-08fix jinja2 none testMichael Merickel
2016-02-08fix tests to get the bind from dbsession_factory properlyMichael Merickel
2016-02-08[wip] update tests in wiki2 tutorialMichael Merickel
2016-02-08expose the session factory on the registryMichael Merickel
2016-02-07update authorization chapter of wiki2 tutorialMichael Merickel
2016-02-07update definingviews chapter of wiki2 tutorialMichael Merickel