summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2019-12-31change hashalg on AuthTktCookieHelper to sha512.Michael Merickel
2019-12-30rename identify(request) to authenticated_identity(request)Michael Merickel
2019-12-26fix imp deprecationMichael Merickel
2019-12-24add "of the documentation" pointer to deprecation warningsMichael Merickel
2019-12-24security policy docs and legacy policy improvementsMichael Merickel
- Added `set_security_policy`` to more places in the docs. - Ensure that the authn/authz policies are not used at all if the legacy policy is not in effect to avoid edge cases where the code would skip the security policy and use the authn/authz policy on accident. - Change deprecation warnings in code to reference the docs by name instead of by URL.
2019-12-23Merge branch 'master' into luhn-authenticated-useridMichael Merickel
2019-12-23modify deprecation warningMichael Merickel
2019-12-17Improve docs for remember/forget.Theron Luhn
2019-12-17Remove `identity` from authenticated_userid interface.Theron Luhn
2019-12-16Fix EffectivePrincipalsPredicate deprecation warning.Theron Luhn
Fired upon registering, not upon use.
2019-12-15Remove requirement that identity is validated.Theron Luhn
2019-12-15Revert "Bring back identity into permits."Theron Luhn
This reverts commit 2e06fa414412688dc3b7e0b422b0fc0b96ec882f.
2019-12-15handle a missing content negotiation case where the unencoded option is not ↵Michael Merickel
available and the client requests an encoded variant that doesn't exist
2019-12-15Merge pull request #3537 from mmerickel/negotiate-static-encodingMichael Merickel
negotiate the best static asset using supported encodings
2019-12-15Four spaces of indentation.Theron Luhn
2019-12-14Bring back identity into permits.Theron Luhn
2019-12-14Update docs.Theron Luhn
2019-12-14Fix tests for `DummySecurityPolicy`.Theron Luhn
2019-12-14Raise error on kwargs in `LegacySecurityPolicy.forget`.Theron Luhn
2019-12-14Bring back `identify` to `LegacySecurityPolicy`.Theron Luhn
2019-12-14Correct implementation of Request.unauthenticated_userid.Theron Luhn
New implementation was not backwards compatible. This brings back the old implementation, except changing to pull from ISecurityPolicy.authenticated_userid when applicable. Also undeprecated the method again.
2019-12-14Update docs from Configurator.testing_securitypolicy.Theron Luhn
2019-12-14merge upstreamÉric Araujo
2019-12-14start reworking security policyÉric Araujo
2019-12-04negotiate the best static asset using supported encodingsMichael Merickel
2019-12-04add missing versionadded directive on config.add_cache_busterMichael Merickel
2019-11-05invoke `deprecated()`jonathan vanasco
2019-11-05fixed rst; migrated some inline references to the docsjonathan vanasco
2019-11-05updated docstring issuetjonathan vanasco
2019-11-05changes based on feedbackjonathan vanasco
2019-11-05deprecate PickleSerializerjonathan vanasco
2019-11-05black 19.10b0 was released on 2019.10.28 and introduced several changes that ↵jonathan vanasco
affect Pyramid
2019-10-17support Origin: null in csrf_trusted_origins and check_origin=FalseMichael Merickel
2019-10-17remove check_csrf view predicateMichael Merickel
2019-10-02define an IPredicateInfo instead of passing the full configurator to predicatesMichael Merickel
2019-10-02Merge pull request #3510 from mmerickel/scan-categoriesMichael Merickel
modify the default scan categories to be limited to only 'pyramid'
2019-09-30Merge pull request #3465 from luhn/security-policyMichael Merickel
Security policy implementation
2019-09-23Doc fixes from @DeimosTheron Luhn
2019-09-19Document CSRF allow_no_origin option.Theron Luhn
2019-09-19Add allow_no_origin option to CSRF.Theron Luhn
2019-09-18modify the default scan categories to be limited to only 'pyramid'Michael Merickel
2019-08-24fix docstringMichael Merickel
2019-08-24indent stringMichael Merickel
2019-08-24fix some strings concatenated with blackMichael Merickel
2019-08-17Fix indentation for running doctestsSteve Piercy
2019-08-17run linkcheck, fix redirects, change busted links to inline literalsSteve Piercy
2019-07-27Fix typosMin ho Kim
2019-07-21Un-deprecate authenticated_userid.Theron Luhn
2019-07-13Improve authn/authz API docs.Theron Luhn
2019-06-23Add deprecation warnings.Theron Luhn
generated by cgit v1.2.3 (git 2.25.1) at 2026-01-22 12:44:36 +0000