web/application.py
2014-07-15 Julien Cristau [web] add support for HttpOnly cookie flag
2014-07-18 Julien Cristau merge 3.19.3 into 3.20 branch
2014-07-18 Julien Cristau [web] Fix expiry of anonymous sessions (closes #4154479)
2014-07-02 Julien Cristau [web] restore query logging functionality (closes #3972561)
2014-03-13 Julien Cristau [web/ajax] Always return a json dict with a 'reason' key in case of ajax errors
2014-03-13 Julien Cristau [web/ajax] don't override any status code with 500 in ajax_error_handler
2014-03-13 Julien Cristau [web] return 403 for Unauthorized, not 401
2014-03-24 Julien Cristau Move entity cache from web.request.ConnectionCubicWebRequestBase to repoapi.ClientConnection
2014-03-14 Nicolas Chauvat [web] implement cross origin resource sharing (CORS) (closes #2491768)
2014-01-27 Julien Cristau merge 3.18.2 into 3.19 branch
2014-01-17 Sylvain Thénault [web error] exception may not have a 'status' attribute, generating an AttributeError that hides the original error. Closes #3381670 stable
2014-01-13 Julien Cristau merge 3.18.0 in 3.19 branch
2013-11-12 Julien Cristau Fix use of vreg.config.anonymous_user() stable
2013-08-29 Sylvain Thénault [deprecation] add (approximate) version number to deprecation message and set proper stacklevel stable
2013-07-22 Julien Cristau fix typos in docstring, doc and comments stable
2013-06-27 Pierre-Yves David Use new repoapi for the web stack
2013-06-24 Pierre-Yves David [web/application] drop unused import
2013-06-21 Pierre-Yves David [webrequest] set DBAPISession without cnx at initialisation time
2013-06-24 Pierre-Yves David [auth] pass `repo` instead of `vreg` to SessionManager and AuthenticationManager
2012-11-23 Pierre-Yves David web/application: instantiate the repository outside of CubicWebPublisher
2012-12-07 Pierre-Yves David remove vreg argument to CWPublisher
2013-06-14 Pierre-Yves David [application] call req.set_session in application.main_handle_request
2013-06-13 Pierre-Yves David [session-handler] use session directly to update last usage
2013-06-13 Pierre-Yves David [application/connect] simplify connection logic
2013-05-30 Pierre-Yves David [web/application] add some minimal documentation
2013-02-22 Sylvain Thénault [web publish] in case of error, ensure proper http status is set and Content-disposition header is reseted. Closes #2553066 stable
2013-03-08 Pierre-Yves David merge with stable
2013-03-08 Vincent Michel [web application] Fix missing self. in error_handler stable
2013-02-14 Nicolas Chauvat [toward py3k] rewrite dict.keys() and dict.values() (part of #2711624)
2013-02-14 Nicolas Chauvat [toward-py3k] rewrite to "except AnException as exc:" (part of #2711624)
2013-02-14 Nicolas Chauvat [toward-py3k] remove import with_statement (part of #2711624)
2012-12-02 Nicolas Chauvat merge fixes from stable
2012-11-27 David Douard [web] add a Forbidden exception stable
2012-11-16 Sylvain Thénault [validation api] properly use yams 0.36 validation error api and update message catalog. Follows bbe0d6985e59
2012-09-10 Sylvain Thénault [web app] move set of status_out into validation_error_handler to ease readability
2012-09-17 Sylvain Thénault [validation error] refactor validation error handling so translation is done on the web side
2012-07-18 Sylvain Thénault [web app] handle Redirect raised during session establishment, as this may be used by eg openid authentication. Closes #2430018 stable
2012-07-13 Sylvain Thénault [web app] only log tb when explicitly asked stable
2012-06-14 Pierre-Yves David [web/application] declare default 'content' value sooner (closes #2406560)
2012-05-09 Aurelien Campeas [app] turn these info into debug logs (this being too chatty for .info)
2012-03-15 Pierre-Yves David [web] Move request handling logic into cubicweb application. (closes #2200684)
2012-03-15 Pierre-Yves David [login] split authentication logic from post authentication logic (closes #2200755)
2012-02-27 Pierre-Yves David [web application] move default path logic inside url publisher
2012-02-27 Anthony Truchet [web] Exposes the undo feature to user through a undo-history view (closes #893940)
2012-01-23 Sylvain Thénault [vreg] move base registry implementation to logilab.common. Closes #1916014
2011-12-16 Adrien Di Mascio [controllers] deprecate JSonController and implement AjaxController / ajax-func registry (closes #2110265)
2011-10-21 Sylvain Thénault [diet] drop pre 3.6 API compatibility (but attempt to keep data cmopatibility). Closes #2017916
2011-09-27 Adrien Di Mascio [views] implement json / jsonp export views (closes #1942658)
2011-09-23 Sylvain Thénault [web request] fix cookie 'expires' formating (closes #1953945) stable
2011-09-21 Sylvain Thénault [exceptions] stop catching any exception in various places (closes #1942716) stable
2011-06-30 Sylvain Thénault [web session] fix bad cleanup of session without a connection set. Closes #1772125 stable
2011-05-25 Sylvain Thénault [web session] fix session handling so we get a chance to have for instance the 'forgotpwd' feature working on a site where anonymous are not allowed stable
2011-05-10 Pierre-Yves David [web server] #1642893 issue a 403 instead of a 500 on Unauthorized exception oldstable
2011-03-16 Alexandre Fayolle help pylint by explicitely defining some attributes oldstable
2011-01-07 Sylvain Thénault [web session] refactor to finally closes #343036: allow _postlogin behaviour overloading stable
2010-11-05 Sylvain Thénault [web session] fix '#1375582: sometime have to relogin since secure session cookie are used' by having different session cookie for http/https version. Also add application name to avoid potential pb when developping differents appls on the same port. stable
2010-10-22 Sylvain Thénault [pylint] fix a bug of pylint detected errors and i18n pb (calling builtins._ instead of req._)
2010-10-21 Sylvain Thénault #1346310: Add `Secure` attribute to cookie when navigating on https
2010-10-08 Sylvain Thénault [schema / sources] store data sources as cubicweb entities
2010-09-23 Sylvain Thénault backport stable
less more (0) -100 -60 tip