| 2014-07-15 |
Julien Cristau |
[web] add support for HttpOnly cookie flag
|
file |
diff |
annotate
|
| 2014-07-18 |
Julien Cristau |
merge 3.19.3 into 3.20 branch
|
file |
diff |
annotate
|
| 2014-07-18 |
Julien Cristau |
[web] Fix expiry of anonymous sessions (closes #4154479)
|
file |
diff |
annotate
|
| 2014-07-02 |
Julien Cristau |
[web] restore query logging functionality (closes #3972561)
|
file |
diff |
annotate
|
| 2014-03-13 |
Julien Cristau |
[web/ajax] Always return a json dict with a 'reason' key in case of ajax errors
|
file |
diff |
annotate
|
| 2014-03-13 |
Julien Cristau |
[web/ajax] don't override any status code with 500 in ajax_error_handler
|
file |
diff |
annotate
|
| 2014-03-13 |
Julien Cristau |
[web] return 403 for Unauthorized, not 401
|
file |
diff |
annotate
|
| 2014-03-24 |
Julien Cristau |
Move entity cache from web.request.ConnectionCubicWebRequestBase to repoapi.ClientConnection
|
file |
diff |
annotate
|
| 2014-03-14 |
Nicolas Chauvat |
[web] implement cross origin resource sharing (CORS) (closes #2491768)
|
file |
diff |
annotate
|
| 2014-01-27 |
Julien Cristau |
merge 3.18.2 into 3.19 branch
|
file |
diff |
annotate
|
| 2014-01-17 |
Sylvain Thénault |
[web error] exception may not have a 'status' attribute, generating an AttributeError that hides the original error. Closes #3381670
stable
|
file |
diff |
annotate
|
| 2014-01-13 |
Julien Cristau |
merge 3.18.0 in 3.19 branch
|
file |
diff |
annotate
|
| 2013-11-12 |
Julien Cristau |
Fix use of vreg.config.anonymous_user()
stable
|
file |
diff |
annotate
|
| 2013-08-29 |
Sylvain Thénault |
[deprecation] add (approximate) version number to deprecation message and set proper stacklevel
stable
|
file |
diff |
annotate
|
| 2013-07-22 |
Julien Cristau |
fix typos in docstring, doc and comments
stable
|
file |
diff |
annotate
|
| 2013-06-27 |
Pierre-Yves David |
Use new repoapi for the web stack
|
file |
diff |
annotate
|
| 2013-06-24 |
Pierre-Yves David |
[web/application] drop unused import
|
file |
diff |
annotate
|
| 2013-06-21 |
Pierre-Yves David |
[webrequest] set DBAPISession without cnx at initialisation time
|
file |
diff |
annotate
|
| 2013-06-24 |
Pierre-Yves David |
[auth] pass `repo` instead of `vreg` to SessionManager and AuthenticationManager
|
file |
diff |
annotate
|
| 2012-11-23 |
Pierre-Yves David |
web/application: instantiate the repository outside of CubicWebPublisher
|
file |
diff |
annotate
|
| 2012-12-07 |
Pierre-Yves David |
remove vreg argument to CWPublisher
|
file |
diff |
annotate
|
| 2013-06-14 |
Pierre-Yves David |
[application] call req.set_session in application.main_handle_request
|
file |
diff |
annotate
|
| 2013-06-13 |
Pierre-Yves David |
[session-handler] use session directly to update last usage
|
file |
diff |
annotate
|
| 2013-06-13 |
Pierre-Yves David |
[application/connect] simplify connection logic
|
file |
diff |
annotate
|
| 2013-05-30 |
Pierre-Yves David |
[web/application] add some minimal documentation
|
file |
diff |
annotate
|
| 2013-02-22 |
Sylvain Thénault |
[web publish] in case of error, ensure proper http status is set and Content-disposition header is reseted. Closes #2553066
stable
|
file |
diff |
annotate
|
| 2013-03-08 |
Pierre-Yves David |
merge with stable
|
file |
diff |
annotate
|
| 2013-03-08 |
Vincent Michel |
[web application] Fix missing self. in error_handler
stable
|
file |
diff |
annotate
|
| 2013-02-14 |
Nicolas Chauvat |
[toward py3k] rewrite dict.keys() and dict.values() (part of #2711624)
|
file |
diff |
annotate
|
| 2013-02-14 |
Nicolas Chauvat |
[toward-py3k] rewrite to "except AnException as exc:" (part of #2711624)
|
file |
diff |
annotate
|
| 2013-02-14 |
Nicolas Chauvat |
[toward-py3k] remove import with_statement (part of #2711624)
|
file |
diff |
annotate
|
| 2012-12-02 |
Nicolas Chauvat |
merge fixes from stable
|
file |
diff |
annotate
|
| 2012-11-27 |
David Douard |
[web] add a Forbidden exception
stable
|
file |
diff |
annotate
|
| 2012-11-16 |
Sylvain Thénault |
[validation api] properly use yams 0.36 validation error api and update message catalog. Follows bbe0d6985e59
|
file |
diff |
annotate
|
| 2012-09-10 |
Sylvain Thénault |
[web app] move set of status_out into validation_error_handler to ease readability
|
file |
diff |
annotate
|
| 2012-09-17 |
Sylvain Thénault |
[validation error] refactor validation error handling so translation is done on the web side
|
file |
diff |
annotate
|
| 2012-07-18 |
Sylvain Thénault |
[web app] handle Redirect raised during session establishment, as this may be used by eg openid authentication. Closes #2430018
stable
|
file |
diff |
annotate
|
| 2012-07-13 |
Sylvain Thénault |
[web app] only log tb when explicitly asked
stable
|
file |
diff |
annotate
|
| 2012-06-14 |
Pierre-Yves David |
[web/application] declare default 'content' value sooner (closes #2406560)
|
file |
diff |
annotate
|
| 2012-05-09 |
Aurelien Campeas |
[app] turn these info into debug logs (this being too chatty for .info)
|
file |
diff |
annotate
|
| 2012-03-15 |
Pierre-Yves David |
[web] Move request handling logic into cubicweb application. (closes #2200684)
|
file |
diff |
annotate
|
| 2012-03-15 |
Pierre-Yves David |
[login] split authentication logic from post authentication logic (closes #2200755)
|
file |
diff |
annotate
|
| 2012-02-27 |
Pierre-Yves David |
[web application] move default path logic inside url publisher
|
file |
diff |
annotate
|
| 2012-02-27 |
Anthony Truchet |
[web] Exposes the undo feature to user through a undo-history view (closes #893940)
|
file |
diff |
annotate
|
| 2012-01-23 |
Sylvain Thénault |
[vreg] move base registry implementation to logilab.common. Closes #1916014
|
file |
diff |
annotate
|
| 2011-12-16 |
Adrien Di Mascio |
[controllers] deprecate JSonController and implement AjaxController / ajax-func registry (closes #2110265)
|
file |
diff |
annotate
|
| 2011-10-21 |
Sylvain Thénault |
[diet] drop pre 3.6 API compatibility (but attempt to keep data cmopatibility). Closes #2017916
|
file |
diff |
annotate
|
| 2011-09-27 |
Adrien Di Mascio |
[views] implement json / jsonp export views (closes #1942658)
|
file |
diff |
annotate
|
| 2011-09-23 |
Sylvain Thénault |
[web request] fix cookie 'expires' formating (closes #1953945)
stable
|
file |
diff |
annotate
|
| 2011-09-21 |
Sylvain Thénault |
[exceptions] stop catching any exception in various places (closes #1942716)
stable
|
file |
diff |
annotate
|
| 2011-06-30 |
Sylvain Thénault |
[web session] fix bad cleanup of session without a connection set. Closes #1772125
stable
|
file |
diff |
annotate
|
| 2011-05-25 |
Sylvain Thénault |
[web session] fix session handling so we get a chance to have for instance the 'forgotpwd' feature working on a site where anonymous are not allowed
stable
|
file |
diff |
annotate
|
| 2011-05-10 |
Pierre-Yves David |
[web server] #1642893 issue a 403 instead of a 500 on Unauthorized exception
oldstable
|
file |
diff |
annotate
|
| 2011-03-16 |
Alexandre Fayolle |
help pylint by explicitely defining some attributes
oldstable
|
file |
diff |
annotate
|
| 2011-01-07 |
Sylvain Thénault |
[web session] refactor to finally closes #343036: allow _postlogin behaviour overloading
stable
|
file |
diff |
annotate
|
| 2010-11-05 |
Sylvain Thénault |
[web session] fix '#1375582: sometime have to relogin since secure session cookie are used' by having different session cookie for http/https version. Also add application name to avoid potential pb when developping differents appls on the same port.
stable
|
file |
diff |
annotate
|
| 2010-10-22 |
Sylvain Thénault |
[pylint] fix a bug of pylint detected errors and i18n pb (calling builtins._ instead of req._)
|
file |
diff |
annotate
|
| 2010-10-21 |
Sylvain Thénault |
#1346310: Add `Secure` attribute to cookie when navigating on https
|
file |
diff |
annotate
|
| 2010-10-08 |
Sylvain Thénault |
[schema / sources] store data sources as cubicweb entities
|
file |
diff |
annotate
|
| 2010-09-23 |
Sylvain Thénault |
backport stable
|
file |
diff |
annotate
|
| 2010-09-23 |
Sylvain Thénault |
[publisher] add session id when logging published path
stable
|
file |
diff |
annotate
|
| 2010-09-16 |
Sylvain Thénault |
backport stable into default
|
file |
diff |
annotate
|
| 2010-09-16 |
Sylvain Thénault |
[publisher] avoid extra Name error on unexpected error
stable
|
file |
diff |
annotate
|
| 2010-09-16 |
Sylvain Thénault |
[publisher] with python>=2.5, we should catch BaseException here
stable
|
file |
diff |
annotate
|
| 2010-08-25 |
Sylvain Thénault |
backport stable
|
file |
diff |
annotate
|
| 2010-08-13 |
Sylvain Thénault |
integrate Celso's work on translation file: proper/complete spanish translation, fixed some typos in french translation, occured -> occurred fix in various places
stable
|
file |
diff |
annotate
|
| 2010-07-26 |
Sylvain Thénault |
[session] cleanup session-time / cleanup-session-time...
|
file |
diff |
annotate
|
| 2010-07-02 |
Sylvain Thénault |
backport stable
|
file |
diff |
annotate
|
| 2010-07-02 |
Sylvain Thénault |
[publisher] avoid useless rollback after successful commit, which clutters debug logs and may also not be cost-free
stable
|
file |
diff |
annotate
|
| 2010-06-11 |
Sylvain Thénault |
backport stable
|
file |
diff |
annotate
|
| 2010-06-10 |
Sylvain Thénault |
[iprogress] move adapter to entities.adapters
|
file |
diff |
annotate
|
| 2010-06-10 |
Alexandre Fayolle |
fix wrong calculation of clean_session_interval
stable
|
file |
diff |
annotate
|
| 2010-06-03 |
Sylvain Thénault |
backport stable
|
file |
diff |
annotate
|
| 2010-06-01 |
Julien Jehannet |
[web] cleanup use of config in web application initialisation
stable
|
file |
diff |
annotate
|
| 2010-05-26 |
Sylvain Thénault |
[web] update to 3.9 Entity api
|
file |
diff |
annotate
|
| 2010-05-26 |
Sylvain Thénault |
backport stable
|
file |
diff |
annotate
|
| 2010-05-26 |
Sylvain Thénault |
[web] dont attempt to update last login time on ldap users, avoiding spurious tb in logs (closes #914464)
stable
|
file |
diff |
annotate
|
| 2010-05-26 |
Sylvain Thénault |
[web] disallow authenticated users to access to the login form (closes #914873)
stable
|
file |
diff |
annotate
|
| 2010-05-10 |
Sylvain Thénault |
backport stable
|
file |
diff |
annotate
|
| 2010-05-06 |
Sylvain Thénault |
[web session] fix potential key error on logout (occurs once the session has been transparently reconnected, hence session.sessionid and session.cnx.sessionid differs)
stable
|
file |
diff |
annotate
|
| 2010-04-29 |
Sylvain Thénault |
[webconfig] refactor/cleanup debug mode management on startup: simply use config.debugmode instead of debug argument everywhere...
|
file |
diff |
annotate
|
| 2010-04-28 |
Sylvain Thénault |
backport oldstable changes
stable
|
file |
diff |
annotate
|
| 2010-04-28 |
Sylvain Thénault |
replace logilab-common by CubicWeb in disclaimer
oldstable
|
file |
diff |
annotate
|
| 2010-04-28 |
Sylvain Thénault |
backport default into stable: stable is now cw 3.8
|
file |
diff |
annotate
|
| 2010-04-28 |
Sylvain Thénault |
proper licensing information (LGPL-2.1). Hope I get it right this time.
stable
|
file |
diff |
annotate
|
| 2010-04-23 |
Sylvain Thénault |
backport stable
|
file |
diff |
annotate
|
| 2010-04-22 |
Alexandre Fayolle |
[python2.6] prefer python2.6's builtin json module over simplejson
stable
|
file |
diff |
annotate
|
| 2010-04-19 |
Sylvain Thénault |
backport stable
|
file |
diff |
annotate
|
| 2010-04-19 |
Sylvain Thénault |
[config] properly use time type for options representing a time.
stable
|
file |
diff |
annotate
|
| 2010-04-19 |
Sylvain Thénault |
[web] consistent cleanup session interval time
stable
|
file |
diff |
annotate
|
| 2010-04-15 |
Sylvain Thénault |
backport stable
|
file |
diff |
annotate
|
| 2010-04-15 |
Sylvain Thénault |
[config] better *-session-time documentation and usage in session handler
stable
|
file |
diff |
annotate
|
| 2010-04-14 |
Sylvain Thénault |
[web] put a fake object that raise Unauthorized on any attribute access as req.cnx and req._user, so we are properly asked to authenticated on any view that tries to do something with one of those attributes (instead of doing defensive programming everywhere we're doing that)
|
file |
diff |
annotate
|
| 2010-04-13 |
Sylvain Thénault |
#773448: refactor session and 'no connection' handling, by introducing proper web session. We should now be able to see page even when no anon is configured, and be redirected to the login form as soon as one tries to do a query.
|
file |
diff |
annotate
|
| 2010-04-07 |
Sylvain Thénault |
#759035: Automate addition of eid cachekey in RQL analysis
|
file |
diff |
annotate
|
| 2010-03-24 |
Sylvain Thénault |
[test] don't try to reset session manager during test,
stable
|
file |
diff |
annotate
|
| 2010-03-16 |
Sylvain Thénault |
backport stable into default
|
file |
diff |
annotate
|
| 2010-03-01 |
Katia Saurfelt |
server/web api for accessing to deleted_entites
|
file |
diff |
annotate
|
| 2010-03-16 |
Sylvain Thénault |
#750055: make it easier to change post logout url
stable
|
file |
diff |
annotate
|
| 2010-03-12 |
Sylvain Thénault |
[web] start a new message system based on id of message stored in session's data
|
file |
diff |
annotate
|
| 2010-02-26 |
Adrien Di Mascio |
[web] fix #724769: Use RemoteCallFailed in the publisher's error_handler
stable
|
file |
diff |
annotate
|
| 2010-02-24 |
Sylvain Thénault |
remove #<formid> from url used to redirect after a validation error
stable
|
file |
diff |
annotate
|
| 2010-02-18 |
Sylvain Thénault |
cleanup internal forms parameters in postlogin
stable
|
file |
diff |
annotate
|
| 2010-02-08 |
Sylvain Thénault |
backport stable branch and some vreg cleanups:
|
file |
diff |
annotate
|
| 2010-02-06 |
Sylvain Thénault |
fix duplicated vregistry initialization during tests
stable
|
file |
diff |
annotate
|
| 2010-01-21 |
Sylvain Thénault |
when the vregistry is initialized, no need to call vreg.set_schema (else we trigger appobjects registration twice. This allows significant startup speedup.
|
file |
diff |
annotate
|
| 2010-01-18 |
Sylvain Thénault |
backport stable branch
|
file |
diff |
annotate
|
| 2010-01-13 |
Sylvain Thénault |
refactor form error handling:
|
file |
diff |
annotate
|
| 2010-01-07 |
Adrien Di Mascio |
update copyright: welcome 2010
stable
|
file |
diff |
annotate
|
| 2009-09-23 |
Adrien Di Mascio |
[api] use __regid__ instead of deprecated id
|
file |
diff |
annotate
|
| 2009-08-17 |
Sylvain Thénault |
give vreg where we need it (eg no bound request)
|
file |
diff |
annotate
|
| 2009-08-16 |
Nicolas Chauvat |
backport stable branch
|
file |
diff |
annotate
|
| 2009-08-14 |
Sylvain Thénault |
dont bind set_authmanager on registry reloading event, it's not necesary since the session manager itself is reinstatiated
stable
|
file |
diff |
annotate
|
| 2009-08-12 |
Nicolas Chauvat |
R put version info in deprecation warnings
|
file |
diff |
annotate
|
| 2009-08-05 |
Sylvain Thénault |
[web session] proper reloading of the session manager on vreg update
|
file |
diff |
annotate
|
| 2009-08-05 |
Adrien Di Mascio |
[events] renamed source-reload into registry-reload to avoid potential confusions with datasources
|
file |
diff |
annotate
|
| 2009-08-04 |
Adrien Di Mascio |
[autoreload] recompute urlresolver / urlrewriter after autoreload
|
file |
diff |
annotate
|
| 2009-08-03 |
Sylvain Thénault |
[webapp] missing renaming
|
file |
diff |
annotate
|
| 2009-08-03 |
Sylvain Thénault |
R [vreg] important refactoring of the vregistry, moving behaviour to end dictionnary (and so leaving room for more flexibility ; keep bw compat ; update api usage in cw
|
file |
diff |
annotate
|
| 2009-07-31 |
Nicolas Chauvat |
R [all] logilab.common 0.44 provides only deprecated
|
file |
diff |
annotate
|