Min RK
3cac9a2203
add path arg to public_url helper
2017-04-07 17:01:51 +02:00
Min RK
6b22f80ead
Add Authenticator.auto_login
...
Simplifies login URL, handler login
- all login redirects go to `settings['login_url']`
- `login_url` is unconditionally `/hub/login`
- `/hub/login` renders form page or 'login with...' button
- enabling auto_login redirects from /hub/login to Authenticator.login_url()
2017-04-07 14:49:18 +02:00
Min RK
5f498ffaf3
Merge pull request #1062 from betatim/doc-fix
...
Fix missing space in header
2017-04-07 11:48:34 +02:00
Tim Head
258fe7b277
Fix missing space in header
2017-04-07 10:08:07 +02:00
Carol Willing
703ed7d21e
Merge pull request #938 from minrk/oauth-provider
...
Make JupyterHub an OAuth provider
2017-04-06 06:57:55 -07:00
Min RK
9a1f84329f
clarify oauth store docstrings
...
per review
2017-04-06 12:15:34 +02:00
Min RK
a20c7eb4de
remove unused/unimplemented AccessTokenStore methods
2017-04-06 12:13:08 +02:00
Min RK
e866651f96
update admin access deprecation message
2017-04-06 11:59:31 +02:00
Min RK
2b5f42a546
docstring clarifying what we override in OAuthHandler
2017-04-06 11:50:23 +02:00
Min RK
b811c63ac5
blacklist sphinx 1.5.4
...
it has a bug preventing docs from building
2017-04-06 10:09:14 +02:00
Min RK
c7ea106675
use User wrappers in test_spawner
2017-04-05 16:12:29 +02:00
Min RK
1f2218c875
update travis.yml
...
- remove Python 3.3
- install node.js 6 with nvm
- remove use of outdated travis-wheels
2017-04-05 16:04:34 +02:00
Min RK
99369aa5a1
fix trailing -
in oauth-client-id for single-user servers with empty server_name
2017-04-05 15:53:49 +02:00
Min RK
ffd3c171fe
fix oauth url for SU servers with subdomains
...
and services without
2017-04-05 15:53:49 +02:00
Min RK
ce4b9e8e9f
only store token in single-user cookie
...
not the user model
preserves cached-response behavior from the Hub
so that the Hub can still revoke tokens.
2017-04-05 15:53:49 +02:00
Min RK
ef51eb21e0
get OAuth working with subdomains
...
needs a lot of host passing around
2017-04-05 15:53:49 +02:00
Min RK
b1efe3a5c1
load initial API token before setting up oauth client
2017-04-05 15:53:48 +02:00
Min RK
6d647b5387
use API token for oauth client secret
...
rather than a separate single-purpose secret
since we need the token anyway, use it for the secret handshake as well
2017-04-05 15:53:48 +02:00
Min RK
d11c7ba4db
cleanup more after mockservices
2017-04-05 15:53:48 +02:00
Carol Willing
6b33358c56
Merge pull request #1054 from parente/clarify-token-api-auth
...
Minor update to clarify hub token auth
2017-04-04 20:20:48 -07:00
Peter Parente
9030302ff7
Fix typo request -> requests
2017-04-04 22:36:05 -04:00
Peter Parente
1631a6eab0
Minor update to clarify hub token auth
2017-04-04 22:33:57 -04:00
Min RK
c6fe145030
s/JupyterHubOAuthCallback/HubOAuthCallback/
2017-04-04 17:02:34 +02:00
Min RK
5b1435081a
remove redundant/unused code in mockservice fixture
2017-04-04 17:02:34 +02:00
Min RK
39fce0304d
support oauth in services
...
fix bugs caught by tests
2017-04-04 17:02:34 +02:00
Min RK
5a5fdc2565
validate oauth client_id/secret
2017-04-04 17:02:33 +02:00
Min RK
bef121dbe3
get default hub_prefix from env
2017-04-04 17:02:33 +02:00
Min RK
0b7a43f6fa
remove placeholder oauth example
2017-04-04 14:26:44 +02:00
Peter Parente
2d1a45f019
Merge pull request #1050 from willingc/admin-doc
...
Clarify admin users and access in docs
2017-03-31 20:58:54 -04:00
Carol Willing
5494172706
Clarify admin users and access in docs
2017-03-31 10:28:37 -07:00
Min RK
198bb875df
delay evaluation of oauth environment variables
...
only affects mocking in tests
2017-03-31 17:07:21 +02:00
Min RK
d1822ee939
handle hub prefix in HubAuth
2017-03-31 17:06:51 +02:00
Min RK
5e1516189b
allow oauth provider to be missing
...
mostly for testing
2017-03-31 16:15:00 +02:00
Min RK
5819b442aa
stop using deprecated server cookie in tests
...
use Hub cookie instead, which still exists
2017-03-31 15:58:39 +02:00
Min RK
4bb8e47f3b
implement admin-access with OAuth
2017-03-30 19:15:43 +02:00
Min RK
ff6a68112e
put whole user model in cookie
...
ensures cached value has all the info needed (group, etc.)
2017-03-30 16:52:20 +02:00
Min RK
52b9060415
remove debug-print in self handler
2017-03-30 16:35:50 +02:00
Min RK
74728e5f42
make HubOAuth a subclass
...
instead of implementing both shared-cookie and OAuth on HubAuth
2017-03-30 15:57:58 +02:00
Min RK
3e482d08d7
Don't overwrite class name when patching-in hub auth
2017-03-30 15:24:48 +02:00
Min RK
7e55220c3f
use OAuth in single-user server
2017-03-30 15:24:35 +02:00
Min RK
453d1daf8b
move oauth tables to top-level orm
2017-03-29 13:35:13 +02:00
Min RK
d0eb4e0946
add /api/user
handler for identifying the requester
2017-03-28 16:19:56 +02:00
Min RK
9a40196678
Avoid storing secrets and tokens at rest
...
- OAuth access tokens *are* APITokens.
oauth_access_tokens table only stores extra oauth metadata.
- only store hashed client_secret in database,
using HashedCompare to allow comparison.
2017-03-28 16:19:56 +02:00
Min RK
4f7552ea1d
OAuth works!
2017-03-28 16:19:56 +02:00
Min RK
7412e357cf
allow 'bearer' in Authorization header
...
since that's what OAuth likes
2017-03-28 16:19:56 +02:00
Min RK
bac96c679f
fix login URL for oauth provider
2017-03-28 16:19:56 +02:00
Min RK
4f1d201286
OAuth handlers inherit from BaseHandler
2017-03-28 16:19:56 +02:00
Min RK
bcf6559514
WIP: Make JupyterHub an OAuth provider
2017-03-28 16:19:55 +02:00
Min RK
0af9f2b875
Merge pull request #1046 from willingc/iss753
...
Add default behavior of whitelist to FAQ in docs
2017-03-28 09:31:06 +02:00
Min RK
d9393c6663
Merge pull request #1047 from willingc/iss1024
...
Add note to FAQ about updating node on Debian
2017-03-28 09:30:30 +02:00