Commit Graph

394 Commits

Author SHA1 Message Date
Min RK
34b601848e Merge pull request #93 from minrk/setup-no-e
don't include `-e` requirements in setup.py
2014-11-10 10:34:34 -08:00
Min RK
c19ecdd1b2 Don't install requirements in Dockerfile
`pip install .` covers that

The one exception is IPython master,
which is inherited from the base image.
2014-11-08 21:02:46 -08:00
Min RK
584062fbee install requirements explicitly in README
needed for IPython from dev
2014-11-08 21:02:03 -08:00
Min RK
ab6d67f0c9 don't add -e requirements in setup.py
They don't work properly, so don't try.
This means that until IPython 3 is released,
`pip install -e .` will be insufficient.
IPython will need to be installed separately.
2014-11-08 21:00:24 -08:00
Min RK
e79e33051b Merge pull request #91 from minrk/sudo-cwd
handle some failures in sudo
2014-11-04 19:30:22 -08:00
Min RK
612e4ee332 make Spawner.notebook_dir configurable
resolved based on user's home dir
2014-11-04 13:53:01 -08:00
Min RK
6340b1dcc1 ignore some more files in .dockerignore 2014-11-04 13:52:40 -08:00
Min RK
f807a832e0 catch os.chdir errors
when spawning subprocesses.
Walk up until something works,
eventually falling back on a temper.
2014-11-04 13:52:18 -08:00
Min RK
71dbdaf3f2 make home dirs private in sudo example
tests use case where sudo failed to set cwd
2014-11-04 13:47:08 -08:00
Min RK
75d2400b6c fix 'Invalid cookie token' message when no cookie is set 2014-11-04 13:47:08 -08:00
Min RK
5f7c6f8f26 fix typo from dropping IPython 2 support 2014-11-04 12:31:40 -08:00
Min RK
97e308e38f Merge pull request #90 from minrk/jupyterhub_config
update some file names
2014-11-04 12:08:33 -08:00
Min RK
e6335482c5 update some file names
default config file is now `jupyterhub_config.py`,
to be consistent with everything else

add config files, runtime files to .gitignore
2014-11-04 11:58:33 -08:00
Min RK
b1f6a286f9 Merge pull request #89 from minrk/no-python-2
drop support for old Python, IPython < 3
2014-11-04 11:50:27 -08:00
Min RK
9f8fef1f0a Merge pull request #87 from quantopian/postgres-example
Postgres example using docker
2014-11-04 11:45:57 -08:00
Scott Sanderson
cdca10378f DOC: Fix more typos in warning messages. 2014-11-03 14:34:14 -05:00
Scott Sanderson
b6d230e04d DOC: Fix typo in postgres example message. 2014-11-03 13:51:20 -05:00
Scott Sanderson
b34a6d7f83 DEV: Use docker links to set password environment variable in the hub.
Also, yell at people if they use the default password.
2014-11-02 21:40:58 -05:00
Min RK
40a99e61ac drop support for old Python, IPython < 3
Require IPython >= 3.0, Python >= 3.3
2014-11-02 15:51:06 -08:00
Min RK
83569221b9 s/bower/js/ 2014-10-31 16:23:19 -07:00
Scott Sanderson
eee5e5d2ed DOC: Add note about default username/password configuration. 2014-10-31 15:57:35 -04:00
Scott Sanderson
d084d98783 DOC: More tweaks to postgres example. 2014-10-31 15:44:37 -04:00
Scott Sanderson
b5a288587e DOC: Update the README for postgres example. 2014-10-31 14:55:10 -04:00
Scott Sanderson
1a1687f27a DEV: Split postgres example into separate db and hub containers. 2014-10-31 14:38:50 -04:00
Min RK
27e51cd0b4 Merge pull request #81 from minrk/crypto-db
hash tokens in database

closes #80
closes #83
2014-10-30 16:20:16 -07:00
Min RK
da51affacb add hash rounds
default 16k
2014-10-30 15:59:02 -07:00
Scott Sanderson
db3eb28c90 DOC: Tweaks to comments in initdb.sh. 2014-10-30 17:51:00 -04:00
Scott Sanderson
a1a7c432d2 DOC: Add instructions to README.md 2014-10-30 17:42:10 -04:00
Scott Sanderson
8365e291aa DOC: Add example Dockerfile for running a Postgres backend. 2014-10-30 17:30:01 -04:00
Min RK
6149e1f7d9 Merge pull request #73 from minrk/docker-docs
some docs
2014-10-30 11:35:35 -07:00
Min RK
2d6f76d778 shorten interrupt timeout 2014-10-30 10:23:58 -07:00
Min RK
e91b7f630c use starts with when checking token prefix
allows prefix length to change
2014-10-30 10:21:32 -07:00
Min RK
2cd04c6a1e Merge pull request #86 from quantopian/sessions-take-2
DEV: Close transactions at the end of HTTP Requests.
2014-10-30 08:36:56 -07:00
Scott Sanderson
cd1695fdb6 TEST: Use a temporary file instead of a local file for test db. 2014-10-30 01:51:03 -04:00
Scott Sanderson
8cfbe9b38e DEV: Close transactions at the end of HTTP Requests.
Fixes #84
2014-10-29 17:38:24 -04:00
Min RK
ae7b92c55e get rid of cookie tokens
use single cookie_id, since cookies themselves are already unique via `set_secure_cookie`

resetting cookie_id effectively logs out all browser sessions for a given user
2014-10-28 15:01:29 -07:00
Min RK
aed3efc557 Don't need passlib + sqlalchemy_utils for hashing
we can store hash+salt ourselves.
Since we need to implement prefix filtering, etc. ourselves,
there is little benefit to adding a large dependency just for implicit hashing.
2014-10-28 14:18:32 -07:00
MinRK
548c404265 Don't persist proxy auth token to db
removes last need for encrypted database fields, so db_secret is removed as well.
2014-10-27 17:29:45 -07:00
MinRK
536b9b5e17 remove API token from spawner state
it's not needed - new tokens are created when spawners start
2014-10-27 17:29:45 -07:00
MinRK
bce2be7401 only store hashed tokens
- use PasswordType
- store first 4 bytes for filtering by prefix
  since we can't filter by equality on the hashed value.
- user.new_foo_token() returns token string, not ORM object
2014-10-27 17:29:44 -07:00
MinRK
73706632d5 database security
- add files for cookie and database secrets
- store cookie secret on disk, instead of in database
- encrypt auth tokens with EncryptedType
2014-10-27 16:23:46 -07:00
Min RK
db5cf9cf99 Merge pull request #79 from quantopian/unicode_errors
BUG: Fix str/unicode warnings from SQLAlchemy on python 2.
2014-10-27 08:40:44 -07:00
Scott Sanderson
a34d514d66 BUG: Fix str/unicode warnings from SQLAlchemy on python 2.
When running with `reset_db=True` on python 2, several SQLAlchemy operations
were performed with bytes where unicode was expected, resulting in
warnings like the following.

```
/home/ssanderson/.virtualenvs/jupyterhub/local/lib/python2.7/site-packages/sqlalchemy/engine/default.py:573:
SAWarning: Unicode type received non-unicodebind param value.
  param.append(processors[key](compiled_params[key]))
```

Fixes a few stray non-unicode literals and adds a unicode safe wrapper
for `getpass.getuser`.
2014-10-27 03:40:52 -04:00
Min RK
fa7250ecc3 Merge pull request #82 from minrk/secure_cookie
use secure cookies
2014-10-26 20:26:56 -07:00
MinRK
0bd03f0861 remove cookie_secret from single-user servers
pass encrypted cookies to Hub for verification
2014-10-26 20:23:24 -07:00
MinRK
5d9f9c5a3c use secure cookies
rather than setting tokens as plain cookies
2014-10-26 19:54:26 -07:00
Min RK
65b7ce289e Merge pull request #78 from dsblank/patch-2
Same typo
2014-10-25 12:31:19 -07:00
Min RK
05fc6e5ab8 Merge pull request #77 from dsblank/patch-1
Typo on div tag
2014-10-25 12:30:32 -07:00
Doug Blank
e2170ee922 Same typo
Should be a closing div tag.
2014-10-25 08:19:16 -04:00
Doug Blank
481f934eff Typo on div tag
I believe that this div should be a ending div tag.
2014-10-25 08:16:18 -04:00