summaryrefslogtreecommitdiff
path: root/tests
AgeCommit message (Collapse)Author
2019-12-27isortMichael Merickel
2019-12-24security policy docs and legacy policy improvementsMichael Merickel
- Added `set_security_policy`` to more places in the docs. - Ensure that the authn/authz policies are not used at all if the legacy policy is not in effect to avoid edge cases where the code would skip the security policy and use the authn/authz policy on accident. - Change deprecation warnings in code to reference the docs by name instead of by URL.
2019-12-23Merge branch 'master' into luhn-authenticated-useridMichael Merickel
2019-12-23add coverage tests for deprecation warningsMichael Merickel
2019-12-15Fix coverage.Theron Luhn
2019-12-15Fix coverage.Theron Luhn
2019-12-15Revert "Bring back identity into permits."Theron Luhn
This reverts commit 2e06fa414412688dc3b7e0b422b0fc0b96ec882f.
2019-12-15fix failing testMichael Merickel
2019-12-15fix lintMichael Merickel
2019-12-15handle a missing content negotiation case where the unencoded option is not ↵Michael Merickel
available and the client requests an encoded variant that doesn't exist
2019-12-14Fix coverage.Theron Luhn
2019-12-14Fix coverage.Theron Luhn
2019-12-14Bring back identity into permits.Theron Luhn
2019-12-14Remove unnecessary TODO statement.Theron Luhn
2019-12-14Fix couple final view tests.Theron Luhn
2019-12-14Fix tests for `DummySecurityPolicy`.Theron Luhn
2019-12-14Raise error on kwargs in `LegacySecurityPolicy.forget`.Theron Luhn
2019-12-14Don't test request.authenticated_userid stringifies the result.Theron Luhn
2019-12-14Remove failing tests using threadlocal request.Theron Luhn
It shoud be okay to remove because threadlocal support was removed from the security implementation. However, *I don't understand why they started failing.* In master, `get_current_registry` returns a registry object, which DummyRequest will fall back on, causing the tests to pass and rendering them useless. On this branch, it returns `None`, causing the tests to fail. I can't find any reason in the diff why this would change. This makes me nervous.
2019-12-14Fix security policy integration tests.Theron Luhn
2019-12-14Fix tests for `SesssionAuthenticationHelper`Theron Luhn
2019-12-14merge upstreamÉric Araujo
2019-12-14start reworking security policyÉric Araujo
2019-12-04negotiate the best static asset using supported encodingsMichael Merickel
2019-11-05deprecate PickleSerializerjonathan vanasco
2019-11-05black 19.10b0 was released on 2019.10.28 and introduced several changes that ↵jonathan vanasco
affect Pyramid
2019-10-17support Origin: null in csrf_trusted_origins and check_origin=FalseMichael Merickel
2019-10-17remove check_csrf view predicateMichael Merickel
2019-10-02define an IPredicateInfo instead of passing the full configurator to predicatesMichael Merickel
2019-10-02Merge pull request #3510 from mmerickel/scan-categoriesMichael Merickel
modify the default scan categories to be limited to only 'pyramid'
2019-09-30Merge pull request #3465 from luhn/security-policyMichael Merickel
Security policy implementation
2019-09-19Add allow_no_origin option to CSRF.Theron Luhn
2019-09-18modify the default scan categories to be limited to only 'pyramid'Michael Merickel
2019-08-24fix testMichael Merickel
2019-07-27Fix typosMin ho Kim
2019-06-06do not reinvoke exception views if an exception hits the execution policyMichael Merickel
See https://github.com/Pylons/pyramid/issues/3468
2019-05-12Rename request.identity to request.authenticated_identity.Theron Luhn
2019-04-27Add simple integration tests for security.Theron Luhn
2019-04-15Move ACLHelper to pyramid.authorizations.Theron Luhn
2019-04-15Move SessionAuthenticationHelper to pyramid.authentication.Theron Luhn
2019-04-15Revert "Migrate AuthTktCookieHelper to pyramid.security."Theron Luhn
This reverts commit 9f267dd842c5e93336f0392f2809da75a716039a.
2019-04-15Stringify identity in legacy authenticated_userid.Theron Luhn
2019-04-04Use depth argument for view_config info.Theron Luhn
2019-04-01Improve debugging info from view_config decorator.Theron Luhn
Grab a frame when instanciating view_config, rather than pulling info from venusian's AttachInfo. See discussion at https://github.com/Pylons/pyramid/issues/3471 This fixes the build for Python 3.8.
2019-03-30Merge branch 'master' into security-policyTheron Luhn
2019-03-30Migrate AuthTktCookieHelper to pyramid.security.Theron Luhn
2019-03-30Fix formatting.Theron Luhn
2019-03-30Add SessionAuthenticationHelper.Theron Luhn
2019-03-30Implement pyramid.security.ACLHelperTheron Luhn
Mostly a lift-and-shift of the code in ACLAuthorizationPolicy.
2019-03-21Add ignore_files to pserve configuration sectionEric Atkin
generated by cgit v1.2.3 (git 2.25.1) at 2026-01-11 11:47:42 +0000