summaryrefslogtreecommitdiff
path: root/tests
AgeCommit message (Collapse)Author
2019-12-23Merge branch 'master' into luhn-authenticated-useridMichael Merickel
2019-12-23add coverage tests for deprecation warningsMichael Merickel
2019-12-15Fix coverage.Theron Luhn
2019-12-15Fix coverage.Theron Luhn
2019-12-15Revert "Bring back identity into permits."Theron Luhn
This reverts commit 2e06fa414412688dc3b7e0b422b0fc0b96ec882f.
2019-12-15fix failing testMichael Merickel
2019-12-15fix lintMichael Merickel
2019-12-15handle a missing content negotiation case where the unencoded option is not ↵Michael Merickel
available and the client requests an encoded variant that doesn't exist
2019-12-14Fix coverage.Theron Luhn
2019-12-14Fix coverage.Theron Luhn
2019-12-14Bring back identity into permits.Theron Luhn
2019-12-14Remove unnecessary TODO statement.Theron Luhn
2019-12-14Fix couple final view tests.Theron Luhn
2019-12-14Fix tests for `DummySecurityPolicy`.Theron Luhn
2019-12-14Raise error on kwargs in `LegacySecurityPolicy.forget`.Theron Luhn
2019-12-14Don't test request.authenticated_userid stringifies the result.Theron Luhn
2019-12-14Remove failing tests using threadlocal request.Theron Luhn
It shoud be okay to remove because threadlocal support was removed from the security implementation. However, *I don't understand why they started failing.* In master, `get_current_registry` returns a registry object, which DummyRequest will fall back on, causing the tests to pass and rendering them useless. On this branch, it returns `None`, causing the tests to fail. I can't find any reason in the diff why this would change. This makes me nervous.
2019-12-14Fix security policy integration tests.Theron Luhn
2019-12-14Fix tests for `SesssionAuthenticationHelper`Theron Luhn
2019-12-14merge upstreamÉric Araujo
2019-12-14start reworking security policyÉric Araujo
2019-12-04negotiate the best static asset using supported encodingsMichael Merickel
2019-11-05deprecate PickleSerializerjonathan vanasco
2019-11-05black 19.10b0 was released on 2019.10.28 and introduced several changes that ↵jonathan vanasco
affect Pyramid
2019-10-17support Origin: null in csrf_trusted_origins and check_origin=FalseMichael Merickel
2019-10-17remove check_csrf view predicateMichael Merickel
2019-10-02define an IPredicateInfo instead of passing the full configurator to predicatesMichael Merickel
2019-10-02Merge pull request #3510 from mmerickel/scan-categoriesMichael Merickel
modify the default scan categories to be limited to only 'pyramid'
2019-09-30Merge pull request #3465 from luhn/security-policyMichael Merickel
Security policy implementation
2019-09-19Add allow_no_origin option to CSRF.Theron Luhn
2019-09-18modify the default scan categories to be limited to only 'pyramid'Michael Merickel
2019-08-24fix testMichael Merickel
2019-07-27Fix typosMin ho Kim
2019-06-06do not reinvoke exception views if an exception hits the execution policyMichael Merickel
See https://github.com/Pylons/pyramid/issues/3468
2019-05-12Rename request.identity to request.authenticated_identity.Theron Luhn
2019-04-27Add simple integration tests for security.Theron Luhn
2019-04-15Move ACLHelper to pyramid.authorizations.Theron Luhn
2019-04-15Move SessionAuthenticationHelper to pyramid.authentication.Theron Luhn
2019-04-15Revert "Migrate AuthTktCookieHelper to pyramid.security."Theron Luhn
This reverts commit 9f267dd842c5e93336f0392f2809da75a716039a.
2019-04-15Stringify identity in legacy authenticated_userid.Theron Luhn
2019-04-04Use depth argument for view_config info.Theron Luhn
2019-04-01Improve debugging info from view_config decorator.Theron Luhn
Grab a frame when instanciating view_config, rather than pulling info from venusian's AttachInfo. See discussion at https://github.com/Pylons/pyramid/issues/3471 This fixes the build for Python 3.8.
2019-03-30Merge branch 'master' into security-policyTheron Luhn
2019-03-30Migrate AuthTktCookieHelper to pyramid.security.Theron Luhn
2019-03-30Fix formatting.Theron Luhn
2019-03-30Add SessionAuthenticationHelper.Theron Luhn
2019-03-30Implement pyramid.security.ACLHelperTheron Luhn
Mostly a lift-and-shift of the code in ACLAuthorizationPolicy.
2019-03-21Add ignore_files to pserve configuration sectionEric Atkin
2019-03-09Get integration tests working again.Theron Luhn
2019-03-09Implement new dummy security policy.Theron Luhn