| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2016-02-28 | Merge pull request #2383 from stevepiercy/feature/alchemy-scaffold-update | Steve Piercy | |
| add note about deprecation warnings on py3 | |||
| 2016-02-28 | add note about deprecation warnings on py3 | Steve Piercy | |
| 2016-02-28 | fix some nits | Michael Merickel | |
| 2016-02-28 | update distributing.rst (done) | Steve Piercy | |
| - minor grammar - clean up sdist output | |||
| 2016-02-28 | update tests.rst (done) | Steve Piercy | |
| - minor grammar - mention BaseTest class - clean up test output | |||
| 2016-02-28 | Merge pull request #2379 from stevepiercy/feature/alchemy-scaffold-update-authcn | Steve Piercy | |
| wiki2 authentication bug fix | |||
| 2016-02-28 | apply change to all src/*/user.py | Steve Piercy | |
| 2016-02-28 | wiki2 revert unnecessary hmac stuff | Steve Piercy | |
| 2016-02-28 | wiki2 authorization (done) | Steve Piercy | |
| - minor grammar and syntax - align order of bullet points for NewPage and PageResource with code - synch up "viewing app in browser" sections between authentication and authzn | |||
| 2016-02-27 | grammar fix | Steve Piercy | |
| 2016-02-27 | wiki2 authentication bug fix and improvement against timing attack | Steve Piercy | |
| - Bytes type does not have encode method. The expected_hash retrieved from the database is a bytes object. - Use hmac.compare_digest instead of == to avoid timing attacks as a recommended security best practice. See https://www.python.org/dev/peps/pep-0466/ https://bugs.python.org/issue21306 and https://codahale.com/a-lesson-in-timing-attacks/ for details. Note, however, this was not backported to py2.6. For a tutorial, I am OK with stating this will not work on Python 2.6 with a clear warning note at the start of the tutorial and on the authentication step. | |||
| 2016-02-26 | update authentication (done) | Steve Piercy | |
| - remove highlighting from some code blocks because it didn't make sense and added visual noise and dissonance - minor grammar and syntax | |||
| 2016-02-26 | minor grammar | Steve Piercy | |
| 2016-02-26 | update definingviews (done) | Steve Piercy | |
| - minor grammar and syntax | |||
| 2016-02-24 | update definingmodels (done) | Steve Piercy | |
| - minor grammar and syntax | |||
| 2016-02-23 | update definingmodels (WIP) | Steve Piercy | |
| - minor grammar and syntax - define hashing and its purpose | |||
| 2016-02-22 | update basiclayout | Steve Piercy | |
| - minor grammar and syntax - insert complete mymodel.py code | |||
| 2016-02-22 | update installation | Steve Piercy | |
| - update command line output to reflect changes to scaffold - fix inconsistent heading levels - add spacing to separate sections - minor grammar and syntax | |||
| 2016-02-21 | revert a couple of the reversions | Steve Piercy | |
| 2016-02-21 | Remove references to pip | Bert JW Regeer | |
| 2016-02-21 | oopsie, include installation in commit | Steve Piercy | |
| 2016-02-21 | wiki2 docs update WIP | Steve Piercy | |
| - minor grammar, .rst syntax - add pip to glossary - add pip instructions, commented until 1.7 is released | |||
| 2016-02-18 | update tests chapter | Michael Merickel | |
| 2016-02-18 | add fallback for next_url | Michael Merickel | |
| 2016-02-18 | add webtest and tests_require to setup.py | Michael Merickel | |
| 2016-02-18 | update the authorization chapter | Michael Merickel | |
| 2016-02-16 | add first cut at source for authorization chapter | Michael Merickel | |
| 2016-02-16 | remove whitespace | Michael Merickel | |
| 2016-02-16 | use page.name to prepare for context | Michael Merickel | |
| 2016-02-16 | add a new authentication chapter | Michael Merickel | |
| 2016-02-14 | implement the authentication example code | Michael Merickel | |
| 2016-02-14 | split routes into a separate module | Michael Merickel | |
| 2016-02-14 | fix unicode issues with check_password | Michael Merickel | |
| 2016-02-13 | highlight more appropriate lines in views | Michael Merickel | |
| 2016-02-13 | fix syntax | Michael Merickel | |
| 2016-02-13 | improve the views section by removing quirks and explaining transactions | Michael Merickel | |
| 2016-02-12 | update the views/models with setup.py develop | Michael Merickel | |
| 2016-02-12 | forward port changes to models / scripts to later chapters | Michael Merickel | |
| 2016-02-12 | add the bcrypt dependency | Michael Merickel | |
| 2016-02-12 | update the models chapter with the new user model | Michael Merickel | |
| 2016-02-12 | let's go ahead and bite off more than we can chew by adding object-security | Michael Merickel | |
| we'll allow anyone to create pages, not just editors finally we'll allow page creators of pages to edit their pages even if they are not editors | |||
| 2016-02-12 | create an actual user model to prepare for security | Michael Merickel | |
| 2016-02-11 | copy layout and templates from views to authorization | Michael Merickel | |
| 2016-02-10 | move security into one place | Michael Merickel | |
| 2016-02-10 | update 404 templates | Michael Merickel | |
| 2016-02-10 | explain the base layout.jinja2 template and notfound view | Michael Merickel | |
| 2016-02-10 | several simple refactorings | Michael Merickel | |
| - move auth from default.py to auth.py - rename errors to notfound - drop basic templates (mytemplate.jinja2, layout.jinja2) | |||
| 2016-02-10 | split login from forbidden | Michael Merickel | |
| 2016-02-08 | fix functional tests | Michael Merickel | |
| 2016-02-08 | fix jinja2 none test | Michael Merickel | |
