summaryrefslogtreecommitdiff
path: root/pyramid
AgeCommit message (Collapse)Author
2013-12-12Merge pull request #1206 from MatthewWilkes/masterChris McDonough
Update pluralize docs now lingua1.7 is out
2013-12-12Fix a typo.Ira
2013-12-10Expand on docstringMatthew Wilkes
2013-12-10add note about non-bw-compat between SignedCookieSessionFactory and ↵Chris McDonough
UnencryptedCookieSessionFactory. Ref #1200.
2013-12-10use CookieProfile from webob in authentication module, add support for new ↵Chris McDonough
domain attribute on dummy request, depend on webob 1.3 or better
2013-12-07use a single serializer instead of serialize/deserialize in session.py, use ↵Chris McDonough
SignedSerializer from (yet to be released) webob 1.3 instead of local logic in session.py
2013-11-27revert my reversionChris McDonough
2013-11-27Merge branch 'fix.pshell-ipython'Chris McDonough
2013-11-27change the behavior of parse_url_overrides and resource_url to not quote a ↵Chris McDonough
_query/query argument supplied as a string and document in changelog
2013-11-27Merge branch 'feature.custom-query-strings'Chris McDonough
2013-11-27coverageChris McDonough
2013-11-15Added a clarifying comment on i18n _LOCALE_ valueAntti Haapala
2013-11-15remove deprecation warning with new ipython 1.1 embedded terminalMichael Merickel
2013-11-12update docsMichael Merickel
2013-11-12modify quoting to be bare-bonesMichael Merickel
2013-11-12centralize and properly escape query string and anchor argumentsMichael Merickel
2013-11-12remove need for parsing static url twice to replace schemeMichael Merickel
2013-11-09undeprecate remember/forget functions and remove ↵Chris McDonough
remember_userid/forget_userid methods from request
2013-11-07fix testsMichael Merickel
2013-11-07handle static urls generated with a query stringMichael Merickel
2013-11-07fix mishandled anchors that need to be quotedMichael Merickel
2013-11-07tests for custom query stringsMichael Merickel
2013-11-07support encoding arbitrary query stringsMichael Merickel
2013-11-07support query string and anchor on external static urlsMichael Merickel
2013-10-30indicate defaultChris McDonough
2013-10-30indicate defaultChris McDonough
2013-10-30renderingChris McDonough
2013-10-30not methods, attrsChris McDonough
2013-10-30wordingChris McDonough
2013-10-30renderingChris McDonough
2013-10-28wording and specify return valueChris McDonough
2013-10-28add NB notes about recursive add_response_callback policies, use req instead ↵Chris McDonough
of self for normalization with exception getting
2013-10-28avoid a deprecation warning during test runsChris McDonough
2013-10-28defer looking up headers until the response callback is called (FBO things ↵Chris McDonough
like sessionauthenticationpolicy which does its own header-setting when its remember/forget methods are called)
2013-10-28add on_exception flag to remember/forget, fix a bug in _remember_userid and ↵Chris McDonough
_forget_userid (these should always return a sequence even if there is no authentication policy), defactorize tests
2013-10-28Bring change log, API docs, and deprecations in line with normal ↵Chris McDonough
policies/processes
2013-10-28Merge branch 'security-apis-on-request' of github.com:mgrbyte/pyramid into ↵Chris McDonough
mgrbyte-security-apis-on-request
2013-10-27Security APIs on pyramid.request.RequestMatt Russell
The pyramid.security Authorization API function has_permission is made available on the request. The pyramid.security Authentication API functions are now available as properties (unauthenticated_userid, authenticated_userid, effective_principals) and methods (remember_userid, forget_userid) on pyramid.request.Request. Backwards compatibility: For each of the APIs moved to request method or property, the original API in the pyramid.security module proxies to the request. Reworked tests to check module level b/c wrappers call through to mixins for each API. Tests that check no reg on request now do the right thing. Use a response callback to set the request headers for forget_userid and remember_userid. Update docs. Attempt to improve a documentation section referencing the pyramid.security.has_permission function in docs/narr/resources.rst Ensures backwards compatiblity for `pyramid.security.forget` and `pyramid.security.remember`.
2013-10-26Bring coverage back to 100%Bert JW Regeer
2013-10-26digestmod() has to accept a parameter in certain casesBert JW Regeer
Due to line 69 in hmac.py in the Python standard library (2.7) it expects to be able to call the digestmod function with the current key if the key passed in exceeds the block size in length. This fixes the code so that digestmod can accept string as an extra parameter, which is passed through to hashlib.new() [1]: http://hg.python.org/cpython/file/2.7/Lib/hmac.py#l69
2013-10-20notfound and forbidden decorators were ignoring view_defaultsMichael Merickel
This could be fixed in other ways but the basic problem is that because config.add_notfound_view and config.add_forbidden_view have actual signatures instead of *args, **kwargs, the arguments are squashing the view_defaults which are applied later on the call to config.add_view. Basically, by the time the args get to config.add_view, they look explicit when they are not. fix #1173
2013-10-20fix merge conflict and prevent warning from showing up during testing (dont ↵Chris McDonough
import ITemplateRenderer)
2013-10-20add a note so we can defend the choice laterChris McDonough
2013-10-20Merge branch 'master' into fix.basic-authentication-encodingsChris McDonough
2013-10-20fix merge conflictChris McDonough
2013-10-19remove unnecessary length check, slices are magicMichael Merickel
2013-10-19moar typosMichael Merickel
2013-10-19remove redundant "see"Michael Merickel
2013-10-19add admonishment against secret sharingChris McDonough
2013-10-19use zope.deprecation for warning about the ↵Chris McDonough
UnencryptedCookieSessionFactoryConfig deprecation (it will happen at import time, rather than usage time, which is good for tests); add a few sphinx directives for deprecated and versionadded