summaryrefslogtreecommitdiff
path: root/docs
AgeCommit message (Collapse)Author
2019-12-30rename identify(request) to authenticated_identity(request)Michael Merickel
2019-12-29update authentication and authorization chapters of the quick_tutorial to ↵Michael Merickel
use the new ISecurityPolicy
2019-12-27Avoid "WARNING: Duplicate explicit target name" errors by using a double ↵Steve Piercy
underscore to make an anonymous hyperlink. See: https://docutils.sourceforge.io/docs/ref/rst/restructuredtext.html#anonymous-hyperlinks - Restore previous reference names in other doc files.
2019-12-27Fix broken reference to pyramid-cookiecuttersSteve Piercy
2019-12-27Expand cookiecutters doc to include more references, using the old ↵Steve Piercy
scaffolds.rst as an example. - Update reST target and label for Pyramid cookiecutters.
2019-12-24alphabetizeMichael Merickel
2019-12-24security policy docs and legacy policy improvementsMichael Merickel
- Added `set_security_policy`` to more places in the docs. - Ensure that the authn/authz policies are not used at all if the legacy policy is not in effect to avoid edge cases where the code would skip the security policy and use the authn/authz policy on accident. - Change deprecation warnings in code to reference the docs by name instead of by URL.
2019-12-23Merge branch 'master' into luhn-authenticated-useridMichael Merickel
2019-12-23fix links in docs to cookiecutterMichael Merickel
2019-12-23restore py35Michael Merickel
2019-12-17Use `self.identify` instead of `request.authenticated_identity`Theron Luhn
2019-12-16Update docs/narr/security.rst code examples.Theron Luhn
2019-12-15Remove Python 3.4, Python 3.5, and add Python 3.8Steve Piercy
2019-12-15Remove requirement that identity is validated.Theron Luhn
2019-12-15Fix whatsnew.Theron Luhn
2019-12-15Revert "Bring back identity into permits."Theron Luhn
This reverts commit 2e06fa414412688dc3b7e0b422b0fc0b96ec882f.
2019-12-15Merge pull request #3537 from mmerickel/negotiate-static-encodingMichael Merickel
negotiate the best static asset using supported encodings
2019-12-15Four spaces of indentation.Theron Luhn
2019-12-15Update docs/narr/security.rstTheron Luhn
Co-Authored-By: Steve Piercy <web@stevepiercy.com>
2019-12-14Bring back identity into permits.Theron Luhn
2019-12-14Update docs.Theron Luhn
2019-12-14Remove TODO for authentication tutorial.Theron Luhn
It should be done, but not as part of this PR. I'll open an issue.
2019-12-14merge upstreamÉric Araujo
2019-12-14start reworking security policyÉric Araujo
2019-12-09Merge pull request #3543 from behzod/patch-3Steve Piercy
view_classes.rst doc: "classes" -> "functions"
2019-12-09view_classes.rst doc: "classes" -> "functions"Behzod Saidov
2019-12-09Fixed typo. Remove extra $.Behzod Saidov
2019-12-04negotiate the best static asset using supported encodingsMichael Merickel
2019-11-26Merge pull request #3524 from jvanasco/fix-deprecate_PickleSerializerMichael Merickel
deprecate PickleSerializer
2019-11-11remove autoflush=FalseAndrea Borghi
autoflush is necessary for the current implementation views.py
2019-11-11ZopeTransactionExtension is not valid anymore, replace with ↵Andrea Borghi
zope.sqlalchemy.register The new version of zope.sqlalchemy does not provide ZopeTransactionExtension anymore. As stated in (this official PR)[https://github.com/zopefoundation/zope.sqlalchemy/pull/38]
2019-11-07Fix a typo in a class referenceJan Likar
2019-11-05typo and tabsjonathan vanasco
2019-11-05fixed rst; migrated some inline references to the docsjonathan vanasco
2019-11-05changes based on feedbackjonathan vanasco
2019-11-05deprecate PickleSerializerjonathan vanasco
2019-10-17support Origin: null in csrf_trusted_origins and check_origin=FalseMichael Merickel
2019-10-17Merge pull request #3521 from mmerickel/remove-check-csrf-predicateMichael Merickel
remove check_csrf view predicate
2019-10-17move the interface docs to api/interfacesMichael Merickel
2019-10-17remove check_csrf view predicateMichael Merickel
2019-10-17add ISecurityPolicy to the public interface apiMichael Merickel
2019-10-02fix predicate signaturesMichael Merickel
2019-10-02define an IPredicateInfo instead of passing the full configurator to predicatesMichael Merickel
2019-10-01fix a wordMichael Merickel
2019-09-30Merge pull request #3465 from luhn/security-policyMichael Merickel
Security policy implementation
2019-09-30Merge pull request #3512 from luhn/csrf-allow-no-originMichael Merickel
Add allow_no_origin option to CSRF
2019-09-27Remove whatsnew-2.0Theron Luhn
2019-09-23Doc fixes from @DeimosTheron Luhn
2019-09-22Fix name and path of views fileviniciusban
2019-09-19Add a whatsnew-2.0 doc.Theron Luhn