| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2016-04-09 | - add missing files | Steve Piercy | |
| 2016-04-09 | add result of installation step in wiki2 tutorial, but using the recently ↵ | Steve Piercy | |
| updated scaffold from master and normalize its version to 1.7. See #2104. | |||
| 2016-02-28 | redirect to edit page when user attempts to add page that already exists | Steve Piercy | |
| - update src/*/views/default.py - update src/*/routes.py - write new test - revise docs, double-checking line counts and highlighting | |||
| 2016-02-28 | apply change to all src/*/user.py | Steve Piercy | |
| 2016-02-28 | wiki2 revert unnecessary hmac stuff | Steve Piercy | |
| 2016-02-27 | wiki2 authentication bug fix and improvement against timing attack | Steve Piercy | |
| - Bytes type does not have encode method. The expected_hash retrieved from the database is a bytes object. - Use hmac.compare_digest instead of == to avoid timing attacks as a recommended security best practice. See https://www.python.org/dev/peps/pep-0466/ https://bugs.python.org/issue21306 and https://codahale.com/a-lesson-in-timing-attacks/ for details. Note, however, this was not backported to py2.6. For a tutorial, I am OK with stating this will not work on Python 2.6 with a clear warning note at the start of the tutorial and on the authentication step. | |||
| 2016-02-18 | update tests chapter | Michael Merickel | |
| 2016-02-18 | add fallback for next_url | Michael Merickel | |
| 2016-02-18 | add webtest and tests_require to setup.py | Michael Merickel | |
| 2016-02-16 | add first cut at source for authorization chapter | Michael Merickel | |
| 2016-02-16 | remove whitespace | Michael Merickel | |
| 2016-02-16 | use page.name to prepare for context | Michael Merickel | |
| 2016-02-14 | implement the authentication example code | Michael Merickel | |
| 2016-02-14 | split routes into a separate module | Michael Merickel | |
| 2016-02-14 | fix unicode issues with check_password | Michael Merickel | |
| 2016-02-13 | improve the views section by removing quirks and explaining transactions | Michael Merickel | |
| 2016-02-12 | forward port changes to models / scripts to later chapters | Michael Merickel | |
| 2016-02-12 | update the models chapter with the new user model | Michael Merickel | |
| 2016-02-12 | let's go ahead and bite off more than we can chew by adding object-security | Michael Merickel | |
| we'll allow anyone to create pages, not just editors finally we'll allow page creators of pages to edit their pages even if they are not editors | |||
| 2016-02-12 | create an actual user model to prepare for security | Michael Merickel | |
| 2016-02-11 | copy layout and templates from views to authorization | Michael Merickel | |
| 2016-02-10 | move security into one place | Michael Merickel | |
| 2016-02-10 | update 404 templates | Michael Merickel | |
| 2016-02-10 | explain the base layout.jinja2 template and notfound view | Michael Merickel | |
| 2016-02-10 | several simple refactorings | Michael Merickel | |
| - move auth from default.py to auth.py - rename errors to notfound - drop basic templates (mytemplate.jinja2, layout.jinja2) | |||
| 2016-02-10 | split login from forbidden | Michael Merickel | |
| 2016-02-08 | fix functional tests | Michael Merickel | |
| 2016-02-08 | fix jinja2 none test | Michael Merickel | |
| 2016-02-08 | fix tests to get the bind from dbsession_factory properly | Michael Merickel | |
| 2016-02-08 | [wip] update tests in wiki2 tutorial | Michael Merickel | |
| 2016-02-08 | expose the session factory on the registry | Michael Merickel | |
| 2016-02-07 | update authorization chapter of wiki2 tutorial | Michael Merickel | |
| 2016-02-07 | update definingviews chapter of wiki2 tutorial | Michael Merickel | |
| 2016-02-07 | update definingmodels chapter of wiki2 tutorial | Michael Merickel | |
| 2016-02-04 | fix the Base import | Michael Merickel | |
| 2016-02-04 | update source for basiclayout | Michael Merickel | |
| 2015-12-02 | - add comment to NAMING_CONVENTION per 9b12c01168cb756ec36351d7414cad95e87f6581 | Steve Piercy | |
| 2015-12-02 | - rewrite wiki2/tests.rst (removed an obsolete reference to testing models, ↵ | Steve Piercy | |
| per 2885a7b96545c037109d7999319f74869a640050) - add wiki2/src/tests/ files. special thanks to @ppaez | |||
| 2015-11-16 | - complete rewrite of wiki2/authorization.rst | Steve Piercy | |
| - add wiki2/src/authorization/ files - improve <title> tag in views/tutorial/templates/edit.jinja2 | |||
| 2015-11-15 | wrap content with <p> | Steve Piercy | |
| 2015-11-14 | commit new wiki2/src/views/tutorial files | Steve Piercy | |
| 2015-11-13 | update wiki2/src/views and wiki2/definingviews.rst | Steve Piercy | |
| 2015-11-12 | Restore progress after backing changes out of master. | Michael Merickel | |
| This reverts commit 049e670aef9ea5611561546fd5c0e2dd6152b9b7. | |||
| 2015-11-12 | Merge branch 'master' into feature/alchemy-scaffold-update | Tres Seaver | |
| Conflicts: docs/tutorials/wiki2/basiclayout.rst | |||
| 2015-11-12 | update wiki2/src/models and wiki2/definingmodels.rst | Steve Piercy | |
| 2015-11-12 | basiclayout/tutorial - models, scripts, static, templates | Steve Piercy | |
| - use package instead of single file - add tests.py from scaffold - update basiclayout.rst with models section | |||
| 2015-11-11 | basiclayout/tutorial - views | Steve Piercy | |
| - use package instead of single file - add tests.py from scaffold - update basiclayout.rst with views section | |||
| 2015-11-11 | basiclayout/tutorial/setup.py - update template binding from chameleon to jinja2 | Steve Piercy | |
| 2015-11-11 | Revert "update wiki2/src/basiclayout/tutorial" | Steve Piercy | |
| 2015-11-11 | - update basiclayout/tutorial/__init__.py | Steve Piercy | |
| - update section "Application configuration with ``__init__.py``" - move WIP to "Content Models with ``models.py``", wrapped by Sphinx comments | |||
