Commit Graph

4584 Commits

Author SHA1 Message Date
Min RK
a451f11cd3 give Spawners a handle on the Authenticator
band-aid for spawner-authenticator pairs
2015-09-11 11:57:41 +02:00
Min RK
63a476f9a6 remove some unused cruft from spawner 2015-09-11 11:23:00 +02:00
Min RK
100b17819d Merge pull request #296 from minrk/pamela
use pamela instead of simplepam
2015-09-11 11:02:14 +02:00
Min RK
024d8d7378 update mocking for pamela 2015-09-09 14:24:53 +02:00
Min RK
15e50529ff use pamela instead of simplepam
and open PAM sessions after successful auth
2015-09-09 13:55:02 +02:00
Min RK
a1a10be747 Merge pull request #290 from jhamrick/clear-login-cookies
Unset all login cookies
2015-08-22 18:55:30 -07:00
Jessica B. Hamrick
a91ee67e74 Reset other_user_cookies after clearing them 2015-08-22 13:14:05 -07:00
Jessica B. Hamrick
ea5bfa9999 Unset all login cookies 2015-08-21 19:24:44 -07:00
Min RK
bea58ee622 Merge pull request #288 from minrk/dont-auto-redirect-root
redirect unauthenticated root to *regular* login page
2015-08-19 21:44:00 -07:00
Min RK
b698d4d226 redirect root to *regular* login page
shows "Login with..." button for external services
instead of auto-redirecting to login service
(no good for oauth)
2015-08-19 12:43:32 -07:00
Min RK
139c7ecacb always render login page at /login 2015-08-19 12:30:10 -07:00
Min RK
eefa8fcad7 Merge pull request #284 from minrk/double-base-url
remove double base_url in login redirect
2015-08-06 21:48:49 -07:00
Min RK
acaedcd898 remove double base_url in login redirect
user.server.base_url is already correct,
and shouldn't be joined with the hub url
2015-08-06 21:37:06 -07:00
Min RK
a075661bfb Merge pull request #276 from Crunch-io/redirect-to-login
Redirect unauthenticated root to login
2015-07-23 13:00:16 -07:00
Joseph Tate
f2246df5bb Fix logging and comments 2015-07-23 15:08:53 -04:00
Joseph Tate
1a3c062512 Fix broken test 2015-07-23 15:06:20 -04:00
Joseph Tate
05e4ab41fe Redirect to the loginurl when not logged in, fix the user.running redirect to fix a redirect loop 2015-07-23 15:06:03 -04:00
Min RK
6f3ccb2d3d Merge pull request #275 from jhamrick/installation-instructions
Update installation instructions
2015-07-14 22:06:52 -07:00
Jessica B. Hamrick
6e5ce236c1 Update installation instructions 2015-07-14 15:36:35 -07:00
Min RK
58437057a1 back to dev 2015-07-12 15:30:47 -05:00
Min RK
7d39e6a1a3 release 0.2.0 0.2.0 2015-07-12 15:30:02 -05:00
Min RK
0b1aebbbf4 Merge pull request #274 from minrk/check-referer
port security fixes from IPython
2015-07-12 15:27:26 -05:00
Min RK
3003c87f02 check Referer on API requests
For CSRF
2015-07-12 14:23:02 -05:00
Min RK
2c8c88ac3f add CSP report handler 2015-07-12 11:22:21 -05:00
Min RK
db994e09d3 add OPTIONS on API handlers 2015-07-12 11:22:21 -05:00
Min RK
357ba23ff3 set csp_report_uri in single-user server
so Hub gets CSP reports instead of single-user servers.
2015-07-12 11:22:21 -05:00
Min RK
54c0c276ed use hmac.compare_digest for constant time comparisons on tokens 2015-07-12 11:22:21 -05:00
Min RK
baf8bd9e03 Merge pull request #269 from minrk/travis-segfaulty
Use thread local storage to avoid sharing db sessions in tests
2015-07-09 15:08:55 -05:00
Min RK
e866abe1a0 use thread-local properties for hub, proxy 2015-07-09 11:34:35 -05:00
Min RK
48fe642c44 use thread local db sessions
to avoid segfaults on Travis
2015-07-09 11:34:35 -05:00
Min RK
c8487c2117 Merge pull request #268 from dietmarw/patch-1
ipython/ipython is deprecated.
2015-07-09 09:19:47 -05:00
Dietmar Winkler
0d6ee3c63c ipython/ipython is deprecated.
The correct one is now jupyter/notebook
2015-07-09 09:53:18 +02:00
Min RK
a00abc7a76 Merge pull request #267 from minrk/strict-next
require next_url to be an absolute path
2015-07-07 12:33:19 -05:00
Min RK
02c8855d10 Merge pull request #264
add supplemental groups to single-user servers

closes #264
2015-07-07 12:31:33 -05:00
Min RK
b5877ac546 Catch failure to set gids 2015-07-07 12:28:17 -05:00
Min RK
ea91bed620 require next_url to be an absolute path
- disallow relative path
- disallow full URL (cross-site)
2015-07-07 11:28:44 -05:00
Min RK
3e81e2ebf9 Merge pull request #265 from jhamrick/docs
Add some docs clarifications
2015-06-26 08:13:49 +01:00
Jessica B. Hamrick
e9e2b17a92 Move npm install to a different part of the docs 2015-06-26 01:41:14 -04:00
Jessica B. Hamrick
498181d217 Remove sudo from npm install 2015-06-26 01:37:26 -04:00
Jessica B. Hamrick
9f807a5959 Add some docs clarifications 2015-06-25 14:48:18 -04:00
shreddd
d328015fe8 add supplemental groups to the local user notebook
Set the list of supplemental group ids for the user associated with the spawned notebook process. This allows users to access utilize their full complement of UNIX system groups. Currently the user is restricted to their default group - accessing a file owned by any other group does not work, even if a user is a member of that group. This patch fixes that.
2015-06-24 14:56:44 -07:00
Min RK
cbbc0290b9 Merge pull request #263 from minrk/test-singleuser
single-user should still be using IPython.utils.traitlets
2015-06-24 12:53:25 -07:00
Min RK
7477f2f6d1 make sure to launch single-user server at least once in tests 2015-06-24 08:47:51 -07:00
Min RK
c03e50b3a2 single-user should still be using IPython.utils.traitlets
We haven't moved to using notebook 4.0 in the single-user, yet
2015-06-24 08:46:56 -07:00
Min RK
cfd19c3e61 Merge pull request #261 from minrk/traitlets
remove dependency on IPython
2015-06-22 22:56:08 -07:00
Min RK
c289cdfaec remove dependency on IPython
- Standalone traitlets has been released, use it directly.
- Copy url_path_join from notebook
2015-06-22 16:02:45 -07:00
Min RK
7acaf8ce52 Merge pull request #260 from minrk/notebook-aliases
don't try to get notebook aliases from NotebookApp
2015-06-22 15:59:50 -07:00
Min RK
e5821e573a don't try to get notebook aliases from NotebookApp
Sentinel changes make it ~impossible to fetch values without instantiation,
which probably wasn't the best idea in the first place.
2015-06-22 14:50:37 -07:00
Min RK
0c16fb98f3 Merge pull request #257 from minrk/command-traitlet
add command traitlet
2015-06-19 10:46:38 -07:00
Min RK
b27ef8e4cb we're not in the future, yet. 2015-06-12 14:09:05 -07:00