summaryrefslogtreecommitdiff
path: root/docs/tutorials
AgeCommit message (Collapse)Author
2016-02-29Merge branch 'master' into feature/alchemy-scaffold-updateMichael Merickel
2016-02-28Merge remote-tracking branch 'upstream/feature/alchemy-scaffold-update' into ↵Steve Piercy
feature/alchemy-scaffold-update
2016-02-28redirect to edit page when user attempts to add page that already existsSteve Piercy
- update src/*/views/default.py - update src/*/routes.py - write new test - revise docs, double-checking line counts and highlighting
2016-02-28Merge pull request #2383 from stevepiercy/feature/alchemy-scaffold-updateSteve Piercy
add note about deprecation warnings on py3
2016-02-28add note about deprecation warnings on py3Steve Piercy
2016-02-28fix some nitsMichael Merickel
2016-02-28update distributing.rst (done)Steve Piercy
- minor grammar - clean up sdist output
2016-02-28update tests.rst (done)Steve Piercy
- minor grammar - mention BaseTest class - clean up test output
2016-02-28Merge pull request #2379 from stevepiercy/feature/alchemy-scaffold-update-authcnSteve Piercy
wiki2 authentication bug fix
2016-02-28apply change to all src/*/user.pySteve Piercy
2016-02-28wiki2 revert unnecessary hmac stuffSteve Piercy
2016-02-28wiki2 authorization (done)Steve Piercy
- minor grammar and syntax - align order of bullet points for NewPage and PageResource with code - synch up "viewing app in browser" sections between authentication and authzn
2016-02-27grammar fixSteve Piercy
2016-02-27wiki2 authentication bug fix and improvement against timing attackSteve Piercy
- Bytes type does not have encode method. The expected_hash retrieved from the database is a bytes object. - Use hmac.compare_digest instead of == to avoid timing attacks as a recommended security best practice. See https://www.python.org/dev/peps/pep-0466/ https://bugs.python.org/issue21306 and https://codahale.com/a-lesson-in-timing-attacks/ for details. Note, however, this was not backported to py2.6. For a tutorial, I am OK with stating this will not work on Python 2.6 with a clear warning note at the start of the tutorial and on the authentication step.
2016-02-26update authentication (done)Steve Piercy
- remove highlighting from some code blocks because it didn't make sense and added visual noise and dissonance - minor grammar and syntax
2016-02-26minor grammarSteve Piercy
2016-02-26update definingviews (done)Steve Piercy
- minor grammar and syntax
2016-02-24update definingmodels (done)Steve Piercy
- minor grammar and syntax
2016-02-23Fix view name order, windows for 'Return logged_in to renderer.Tres Seaver
2016-02-23Use correct attribute name in the ZODB Wiki tutorial view template.Tres Seaver
2016-02-23update definingmodels (WIP)Steve Piercy
- minor grammar and syntax - define hashing and its purpose
2016-02-22update basiclayoutSteve Piercy
- minor grammar and syntax - insert complete mymodel.py code
2016-02-22update installationSteve Piercy
- update command line output to reflect changes to scaffold - fix inconsistent heading levels - add spacing to separate sections - minor grammar and syntax
2016-02-21revert a couple of the reversionsSteve Piercy
2016-02-21Remove references to pipBert JW Regeer
2016-02-21oopsie, include installation in commitSteve Piercy
2016-02-21wiki2 docs update WIPSteve Piercy
- minor grammar, .rst syntax - add pip to glossary - add pip instructions, commented until 1.7 is released
2016-02-18update tests chapterMichael Merickel
2016-02-18add fallback for next_urlMichael Merickel
2016-02-18add webtest and tests_require to setup.pyMichael Merickel
2016-02-18update the authorization chapterMichael Merickel
2016-02-16add first cut at source for authorization chapterMichael Merickel
2016-02-16remove whitespaceMichael Merickel
2016-02-16use page.name to prepare for contextMichael Merickel
2016-02-16add a new authentication chapterMichael Merickel
2016-02-14implement the authentication example codeMichael Merickel
2016-02-14split routes into a separate moduleMichael Merickel
2016-02-14fix unicode issues with check_passwordMichael Merickel
2016-02-13highlight more appropriate lines in viewsMichael Merickel
2016-02-13fix syntaxMichael Merickel
2016-02-13improve the views section by removing quirks and explaining transactionsMichael Merickel
2016-02-12update the views/models with setup.py developMichael Merickel
2016-02-12forward port changes to models / scripts to later chaptersMichael Merickel
2016-02-12add the bcrypt dependencyMichael Merickel
2016-02-12update the models chapter with the new user modelMichael Merickel
2016-02-12let's go ahead and bite off more than we can chew by adding object-securityMichael Merickel
we'll allow anyone to create pages, not just editors finally we'll allow page creators of pages to edit their pages even if they are not editors
2016-02-12create an actual user model to prepare for securityMichael Merickel
2016-02-11copy layout and templates from views to authorizationMichael Merickel
2016-02-10move security into one placeMichael Merickel
2016-02-10update 404 templatesMichael Merickel