Min RK
40a99e61ac
drop support for old Python, IPython < 3
...
Require IPython >= 3.0, Python >= 3.3
2014-11-02 15:51:06 -08:00
Min RK
27e51cd0b4
Merge pull request #81 from minrk/crypto-db
...
hash tokens in database
closes #80
closes #83
2014-10-30 16:20:16 -07:00
Scott Sanderson
8cfbe9b38e
DEV: Close transactions at the end of HTTP Requests.
...
Fixes #84
2014-10-29 17:38:24 -04:00
Min RK
ae7b92c55e
get rid of cookie tokens
...
use single cookie_id, since cookies themselves are already unique via `set_secure_cookie`
resetting cookie_id effectively logs out all browser sessions for a given user
2014-10-28 15:01:29 -07:00
MinRK
bce2be7401
only store hashed tokens
...
- use PasswordType
- store first 4 bytes for filtering by prefix
since we can't filter by equality on the hashed value.
- user.new_foo_token() returns token string, not ORM object
2014-10-27 17:29:44 -07:00
MinRK
5d9f9c5a3c
use secure cookies
...
rather than setting tokens as plain cookies
2014-10-26 19:54:26 -07:00
MinRK
05320804c6
preserve URL when being redirected to user server
2014-10-01 14:03:44 -07:00
MinRK
9f07b51ec1
update user.last_activity when she visits the hub
2014-09-24 17:15:51 -07:00
MinRK
0577e10276
more hooks for authenticators
...
Allow authenticators to:
- register custom handlers
- change login and logout URLs
- replace the entire login form
This appears to be enough to get oauth working.
2014-09-22 22:17:00 -07:00
MinRK
7af715864c
periodically poll single-user servers
...
If they aren't running, unregister them
and remove them from the proxy so that future
logins are handled by the hub, and spawn new servers.
2014-09-22 16:04:17 -07:00
MinRK
2eb42eb0b3
add orm.User.find and orm.[Foo]Token.find
...
for simple get-by-name access
2014-09-21 22:44:50 -07:00
MinRK
0a2ddb7994
pass config to spawner
2014-09-20 18:31:00 -07:00
MinRK
a77e106488
move some utility functions to ORM classes
...
simplify handler methods
2014-09-18 15:37:39 -07:00
MinRK
81c71a7f45
add missing yield for notify_proxy coroutine
2014-09-16 15:12:35 -07:00
MinRK
294fa8ceb6
add/remove users from whitelist when adding/deleting
2014-09-15 01:21:01 -07:00
MinRK
b24e47d94a
some updates to login redirects
...
/anything served by Hub redirects to /hub/anything
/hub/user/[user] spawns single-user server and redirects to it
2014-09-14 16:47:09 -07:00
MinRK
0a8759b0a5
flesh out REST API
...
can now list/view/add/create/modify users
and start/stop single-user servers
2014-09-14 16:47:09 -07:00
MinRK
a245641886
simplify handler setup with default_handlers in modules
...
like IPython's, but a bit simpler since we don't have
so many services to deal with.
2014-09-14 11:54:37 -07:00
MinRK
53edc0b2f7
add a notion of admin users
...
and an @admin_only decorator for restricted methods
2014-09-14 11:54:05 -07:00
MinRK
42f040c6a1
return orm.User from get_current_user
...
rather than name.
removes need for `get_user` wrapper
2014-09-13 17:19:34 -07:00
MinRK
714770d499
reorg handlers a bit
...
make room for API handlers
2014-09-12 12:09:26 -07:00
