Min RK
c19ecdd1b2
Don't install requirements in Dockerfile
...
`pip install .` covers that
The one exception is IPython master,
which is inherited from the base image.
2014-11-08 21:02:46 -08:00
Min RK
584062fbee
install requirements explicitly in README
...
needed for IPython from dev
2014-11-08 21:02:03 -08:00
Min RK
ab6d67f0c9
don't add -e
requirements in setup.py
...
They don't work properly, so don't try.
This means that until IPython 3 is released,
`pip install -e .` will be insufficient.
IPython will need to be installed separately.
2014-11-08 21:00:24 -08:00
Min RK
e79e33051b
Merge pull request #91 from minrk/sudo-cwd
...
handle some failures in sudo
2014-11-04 19:30:22 -08:00
Min RK
612e4ee332
make Spawner.notebook_dir configurable
...
resolved based on user's home dir
2014-11-04 13:53:01 -08:00
Min RK
6340b1dcc1
ignore some more files in .dockerignore
2014-11-04 13:52:40 -08:00
Min RK
f807a832e0
catch os.chdir errors
...
when spawning subprocesses.
Walk up until something works,
eventually falling back on a temper.
2014-11-04 13:52:18 -08:00
Min RK
71dbdaf3f2
make home dirs private in sudo example
...
tests use case where sudo failed to set cwd
2014-11-04 13:47:08 -08:00
Min RK
75d2400b6c
fix 'Invalid cookie token' message when no cookie is set
2014-11-04 13:47:08 -08:00
Min RK
5f7c6f8f26
fix typo from dropping IPython 2 support
2014-11-04 12:31:40 -08:00
Min RK
97e308e38f
Merge pull request #90 from minrk/jupyterhub_config
...
update some file names
2014-11-04 12:08:33 -08:00
Min RK
e6335482c5
update some file names
...
default config file is now `jupyterhub_config.py`,
to be consistent with everything else
add config files, runtime files to .gitignore
2014-11-04 11:58:33 -08:00
Min RK
b1f6a286f9
Merge pull request #89 from minrk/no-python-2
...
drop support for old Python, IPython < 3
2014-11-04 11:50:27 -08:00
Min RK
9f8fef1f0a
Merge pull request #87 from quantopian/postgres-example
...
Postgres example using docker
2014-11-04 11:45:57 -08:00
Scott Sanderson
cdca10378f
DOC: Fix more typos in warning messages.
2014-11-03 14:34:14 -05:00
Scott Sanderson
b6d230e04d
DOC: Fix typo in postgres example message.
2014-11-03 13:51:20 -05:00
Scott Sanderson
b34a6d7f83
DEV: Use docker links to set password environment variable in the hub.
...
Also, yell at people if they use the default password.
2014-11-02 21:40:58 -05:00
Min RK
40a99e61ac
drop support for old Python, IPython < 3
...
Require IPython >= 3.0, Python >= 3.3
2014-11-02 15:51:06 -08:00
Min RK
83569221b9
s/bower/js/
2014-10-31 16:23:19 -07:00
Scott Sanderson
eee5e5d2ed
DOC: Add note about default username/password configuration.
2014-10-31 15:57:35 -04:00
Scott Sanderson
d084d98783
DOC: More tweaks to postgres example.
2014-10-31 15:44:37 -04:00
Scott Sanderson
b5a288587e
DOC: Update the README for postgres example.
2014-10-31 14:55:10 -04:00
Scott Sanderson
1a1687f27a
DEV: Split postgres example into separate db and hub containers.
2014-10-31 14:38:50 -04:00
Min RK
27e51cd0b4
Merge pull request #81 from minrk/crypto-db
...
hash tokens in database
closes #80
closes #83
2014-10-30 16:20:16 -07:00
Min RK
da51affacb
add hash rounds
...
default 16k
2014-10-30 15:59:02 -07:00
Scott Sanderson
db3eb28c90
DOC: Tweaks to comments in initdb.sh.
2014-10-30 17:51:00 -04:00
Scott Sanderson
a1a7c432d2
DOC: Add instructions to README.md
2014-10-30 17:42:10 -04:00
Scott Sanderson
8365e291aa
DOC: Add example Dockerfile for running a Postgres backend.
2014-10-30 17:30:01 -04:00
Min RK
6149e1f7d9
Merge pull request #73 from minrk/docker-docs
...
some docs
2014-10-30 11:35:35 -07:00
Min RK
2d6f76d778
shorten interrupt timeout
2014-10-30 10:23:58 -07:00
Min RK
e91b7f630c
use starts with when checking token prefix
...
allows prefix length to change
2014-10-30 10:21:32 -07:00
Min RK
2cd04c6a1e
Merge pull request #86 from quantopian/sessions-take-2
...
DEV: Close transactions at the end of HTTP Requests.
2014-10-30 08:36:56 -07:00
Scott Sanderson
cd1695fdb6
TEST: Use a temporary file instead of a local file for test db.
2014-10-30 01:51:03 -04:00
Scott Sanderson
8cfbe9b38e
DEV: Close transactions at the end of HTTP Requests.
...
Fixes #84
2014-10-29 17:38:24 -04:00
Min RK
ae7b92c55e
get rid of cookie tokens
...
use single cookie_id, since cookies themselves are already unique via `set_secure_cookie`
resetting cookie_id effectively logs out all browser sessions for a given user
2014-10-28 15:01:29 -07:00
Min RK
aed3efc557
Don't need passlib + sqlalchemy_utils for hashing
...
we can store hash+salt ourselves.
Since we need to implement prefix filtering, etc. ourselves,
there is little benefit to adding a large dependency just for implicit hashing.
2014-10-28 14:18:32 -07:00
MinRK
548c404265
Don't persist proxy auth token to db
...
removes last need for encrypted database fields, so db_secret is removed as well.
2014-10-27 17:29:45 -07:00
MinRK
536b9b5e17
remove API token from spawner state
...
it's not needed - new tokens are created when spawners start
2014-10-27 17:29:45 -07:00
MinRK
bce2be7401
only store hashed tokens
...
- use PasswordType
- store first 4 bytes for filtering by prefix
since we can't filter by equality on the hashed value.
- user.new_foo_token() returns token string, not ORM object
2014-10-27 17:29:44 -07:00
MinRK
73706632d5
database security
...
- add files for cookie and database secrets
- store cookie secret on disk, instead of in database
- encrypt auth tokens with EncryptedType
2014-10-27 16:23:46 -07:00
Min RK
db5cf9cf99
Merge pull request #79 from quantopian/unicode_errors
...
BUG: Fix str/unicode warnings from SQLAlchemy on python 2.
2014-10-27 08:40:44 -07:00
Scott Sanderson
a34d514d66
BUG: Fix str/unicode warnings from SQLAlchemy on python 2.
...
When running with `reset_db=True` on python 2, several SQLAlchemy operations
were performed with bytes where unicode was expected, resulting in
warnings like the following.
```
/home/ssanderson/.virtualenvs/jupyterhub/local/lib/python2.7/site-packages/sqlalchemy/engine/default.py:573:
SAWarning: Unicode type received non-unicodebind param value.
param.append(processors[key](compiled_params[key]))
```
Fixes a few stray non-unicode literals and adds a unicode safe wrapper
for `getpass.getuser`.
2014-10-27 03:40:52 -04:00
Min RK
fa7250ecc3
Merge pull request #82 from minrk/secure_cookie
...
use secure cookies
2014-10-26 20:26:56 -07:00
MinRK
0bd03f0861
remove cookie_secret from single-user servers
...
pass encrypted cookies to Hub for verification
2014-10-26 20:23:24 -07:00
MinRK
5d9f9c5a3c
use secure cookies
...
rather than setting tokens as plain cookies
2014-10-26 19:54:26 -07:00
Min RK
65b7ce289e
Merge pull request #78 from dsblank/patch-2
...
Same typo
2014-10-25 12:31:19 -07:00
Min RK
05fc6e5ab8
Merge pull request #77 from dsblank/patch-1
...
Typo on div tag
2014-10-25 12:30:32 -07:00
Doug Blank
e2170ee922
Same typo
...
Should be a closing div tag.
2014-10-25 08:19:16 -04:00
Doug Blank
481f934eff
Typo on div tag
...
I believe that this div should be a ending div tag.
2014-10-25 08:16:18 -04:00
Min RK
72ecbe8dc9
Merge pull request #75 from quantopian/same_thread_sqlite_only
...
BUG: Only pass check_same_thread when using sqlite.
2014-10-25 00:19:44 -07:00