Min RK
5f7c6f8f26
fix typo from dropping IPython 2 support
2014-11-04 12:31:40 -08:00
Min RK
97e308e38f
Merge pull request #90 from minrk/jupyterhub_config
...
update some file names
2014-11-04 12:08:33 -08:00
Min RK
e6335482c5
update some file names
...
default config file is now `jupyterhub_config.py`,
to be consistent with everything else
add config files, runtime files to .gitignore
2014-11-04 11:58:33 -08:00
Min RK
b1f6a286f9
Merge pull request #89 from minrk/no-python-2
...
drop support for old Python, IPython < 3
2014-11-04 11:50:27 -08:00
Min RK
9f8fef1f0a
Merge pull request #87 from quantopian/postgres-example
...
Postgres example using docker
2014-11-04 11:45:57 -08:00
Scott Sanderson
cdca10378f
DOC: Fix more typos in warning messages.
2014-11-03 14:34:14 -05:00
Scott Sanderson
b6d230e04d
DOC: Fix typo in postgres example message.
2014-11-03 13:51:20 -05:00
Scott Sanderson
b34a6d7f83
DEV: Use docker links to set password environment variable in the hub.
...
Also, yell at people if they use the default password.
2014-11-02 21:40:58 -05:00
Min RK
40a99e61ac
drop support for old Python, IPython < 3
...
Require IPython >= 3.0, Python >= 3.3
2014-11-02 15:51:06 -08:00
Min RK
83569221b9
s/bower/js/
2014-10-31 16:23:19 -07:00
Scott Sanderson
eee5e5d2ed
DOC: Add note about default username/password configuration.
2014-10-31 15:57:35 -04:00
Scott Sanderson
d084d98783
DOC: More tweaks to postgres example.
2014-10-31 15:44:37 -04:00
Scott Sanderson
b5a288587e
DOC: Update the README for postgres example.
2014-10-31 14:55:10 -04:00
Scott Sanderson
1a1687f27a
DEV: Split postgres example into separate db and hub containers.
2014-10-31 14:38:50 -04:00
Min RK
27e51cd0b4
Merge pull request #81 from minrk/crypto-db
...
hash tokens in database
closes #80
closes #83
2014-10-30 16:20:16 -07:00
Min RK
da51affacb
add hash rounds
...
default 16k
2014-10-30 15:59:02 -07:00
Scott Sanderson
db3eb28c90
DOC: Tweaks to comments in initdb.sh.
2014-10-30 17:51:00 -04:00
Scott Sanderson
a1a7c432d2
DOC: Add instructions to README.md
2014-10-30 17:42:10 -04:00
Scott Sanderson
8365e291aa
DOC: Add example Dockerfile for running a Postgres backend.
2014-10-30 17:30:01 -04:00
Min RK
6149e1f7d9
Merge pull request #73 from minrk/docker-docs
...
some docs
2014-10-30 11:35:35 -07:00
Min RK
2d6f76d778
shorten interrupt timeout
2014-10-30 10:23:58 -07:00
Min RK
e91b7f630c
use starts with when checking token prefix
...
allows prefix length to change
2014-10-30 10:21:32 -07:00
Min RK
2cd04c6a1e
Merge pull request #86 from quantopian/sessions-take-2
...
DEV: Close transactions at the end of HTTP Requests.
2014-10-30 08:36:56 -07:00
Scott Sanderson
cd1695fdb6
TEST: Use a temporary file instead of a local file for test db.
2014-10-30 01:51:03 -04:00
Scott Sanderson
8cfbe9b38e
DEV: Close transactions at the end of HTTP Requests.
...
Fixes #84
2014-10-29 17:38:24 -04:00
Min RK
ae7b92c55e
get rid of cookie tokens
...
use single cookie_id, since cookies themselves are already unique via `set_secure_cookie`
resetting cookie_id effectively logs out all browser sessions for a given user
2014-10-28 15:01:29 -07:00
Min RK
aed3efc557
Don't need passlib + sqlalchemy_utils for hashing
...
we can store hash+salt ourselves.
Since we need to implement prefix filtering, etc. ourselves,
there is little benefit to adding a large dependency just for implicit hashing.
2014-10-28 14:18:32 -07:00
MinRK
548c404265
Don't persist proxy auth token to db
...
removes last need for encrypted database fields, so db_secret is removed as well.
2014-10-27 17:29:45 -07:00
MinRK
536b9b5e17
remove API token from spawner state
...
it's not needed - new tokens are created when spawners start
2014-10-27 17:29:45 -07:00
MinRK
bce2be7401
only store hashed tokens
...
- use PasswordType
- store first 4 bytes for filtering by prefix
since we can't filter by equality on the hashed value.
- user.new_foo_token() returns token string, not ORM object
2014-10-27 17:29:44 -07:00
MinRK
73706632d5
database security
...
- add files for cookie and database secrets
- store cookie secret on disk, instead of in database
- encrypt auth tokens with EncryptedType
2014-10-27 16:23:46 -07:00
Min RK
db5cf9cf99
Merge pull request #79 from quantopian/unicode_errors
...
BUG: Fix str/unicode warnings from SQLAlchemy on python 2.
2014-10-27 08:40:44 -07:00
Scott Sanderson
a34d514d66
BUG: Fix str/unicode warnings from SQLAlchemy on python 2.
...
When running with `reset_db=True` on python 2, several SQLAlchemy operations
were performed with bytes where unicode was expected, resulting in
warnings like the following.
```
/home/ssanderson/.virtualenvs/jupyterhub/local/lib/python2.7/site-packages/sqlalchemy/engine/default.py:573:
SAWarning: Unicode type received non-unicodebind param value.
param.append(processors[key](compiled_params[key]))
```
Fixes a few stray non-unicode literals and adds a unicode safe wrapper
for `getpass.getuser`.
2014-10-27 03:40:52 -04:00
Min RK
fa7250ecc3
Merge pull request #82 from minrk/secure_cookie
...
use secure cookies
2014-10-26 20:26:56 -07:00
MinRK
0bd03f0861
remove cookie_secret from single-user servers
...
pass encrypted cookies to Hub for verification
2014-10-26 20:23:24 -07:00
MinRK
5d9f9c5a3c
use secure cookies
...
rather than setting tokens as plain cookies
2014-10-26 19:54:26 -07:00
Min RK
65b7ce289e
Merge pull request #78 from dsblank/patch-2
...
Same typo
2014-10-25 12:31:19 -07:00
Min RK
05fc6e5ab8
Merge pull request #77 from dsblank/patch-1
...
Typo on div tag
2014-10-25 12:30:32 -07:00
Doug Blank
e2170ee922
Same typo
...
Should be a closing div tag.
2014-10-25 08:19:16 -04:00
Doug Blank
481f934eff
Typo on div tag
...
I believe that this div should be a ending div tag.
2014-10-25 08:16:18 -04:00
Min RK
72ecbe8dc9
Merge pull request #75 from quantopian/same_thread_sqlite_only
...
BUG: Only pass check_same_thread when using sqlite.
2014-10-25 00:19:44 -07:00
Scott Sanderson
d7f1d6d2aa
BUG: Only pass check_same_thread when using sqlite.
2014-10-23 16:31:44 -04:00
MinRK
9e75d8248f
add sudo example Dockerfile
2014-10-21 20:04:12 -07:00
MinRK
cfd884459f
clarify some installation in README
2014-10-21 20:04:12 -07:00
Min RK
8c2f09f306
Merge pull request #68 from minrk/sudo-kill-2
...
use `sudo kill` for signaling when subprocesses are started with sudo
2014-10-21 19:03:43 -07:00
MinRK
c9331702d5
use pgrep instead of ps to get sudo pid
...
not sure why it behaves differently, but it does.
2014-10-21 17:33:16 -07:00
Min RK
7048f9044a
Merge pull request #70 from minrk/db-fail-init
...
better error messages on failed db connection
2014-10-19 19:53:08 -07:00
MinRK
c037f2b804
s/singleuserapp/singleuser
2014-10-19 19:52:29 -07:00
MinRK
9f149b20f4
better error messages on failed db connection
...
check for file existence and write access
2014-10-19 16:24:44 -07:00
MinRK
78bc79bcb9
use sudo kill
for signaling when subprocesses are started with sudo
...
In order for this to work, add to `/etc/sudoers`:
HUB_USER ALL=(JUPYTER_USERS) NOPASSWD:/bin/kill
2014-10-18 23:21:26 -07:00