Commit Graph

7405 Commits

Author SHA1 Message Date
Min RK
e766d7a885 update test expectations for some bs5 classes 2024-04-16 14:43:06 +02:00
Min RK
f13fb2f12e update services dropdown for bs5 2024-04-16 14:42:45 +02:00
Min RK
904e200daf fix testing authenticator config
wrong class
2024-04-16 09:47:35 +02:00
Min RK
1ae1e66136 update modal for bs5 2024-04-16 09:30:40 +02:00
Min RK
8820d5c028 update admin for bs5
- more consistent use of react-bootstrap
- reusable MainContainer, MainCol for consistent layout
2024-04-15 13:31:35 +02:00
Min RK
a50ed507fe udpate token page for bs5 2024-04-15 11:21:02 +02:00
Min RK
4320f2aff5 document running build:watch with testing config
remove mentions of yarn - we don't use it
2024-04-15 11:20:51 +02:00
Min RK
102db113cf Merge branch 'main' into bs5 2024-04-15 10:59:53 +02:00
Min RK
b06a0f29ed Merge pull request #4701 from consideRatio/pr/add-allow-existing-users
Add Authenticator config `allow_all` and `allow_existing_users`
2024-04-15 10:57:45 +02:00
Min RK
48c046359f remove unnecessary test parameter
allow_all doesn't vary, so doesn't need to be a parameter
2024-04-15 10:34:30 +02:00
Min RK
dc234a79f0 Merge pull request #4782 from minrk/group-output
test: avoid producing '[group]' string in output
2024-04-15 10:33:36 +02:00
Min RK
8fd09053a2 avoid producing '[group]' string in output
GitHub Actions starts a log expansion group when it sees the string `[group]`,
which happens when that is a parametrize argument
which results in collapsing all subsequent test outputs

pytest.param lets us assign an id that is used in output, but not the value itself
2024-04-15 10:20:31 +02:00
Min RK
634d59dfd5 Merge pull request #4783 from manics/token-button-after
Token UI: move button to after form fields
2024-04-15 10:07:18 +02:00
Simon Li
061d267d74 Token UI: move button to after form fields 2024-04-12 17:01:11 +01:00
Min RK
d0523f5e93 Merge pull request #4781 from minrk/template-debug
clarify error template debug log
2024-04-11 09:35:24 +02:00
Min RK
6a93abbe1c Merge pull request #4779 from krassowski/support-allow_unauthenticated_access-false
Support forbidding unauthenticated access (`allow_unauthenticated_access = False`)
2024-04-10 13:19:45 +02:00
Min RK
6c0a0643e8 Merge pull request #4776 from minrk/forward-415
forward-port 4.1.5
2024-04-10 12:57:50 +02:00
Min RK
e3ea59759e clarify error template debug log
'No template for 404' looks like something's wrong, when all it means to convey is that it doesn't get _special_ treatment
and the default error page is enough.
2024-04-10 12:56:41 +02:00
krassowski
aefc8de49a Add @allow_unauthenticated decorators 2024-04-10 11:03:33 +01:00
krassowski
88189d54d9 Add a test for allow_unauthenticated_access (xfail) 2024-04-10 10:58:21 +01:00
Min RK
3fe1e9d510 update admin for bs5
- panel became card
- fix alignment of filter checkbox
- make all buttons consistently buttons
2024-04-09 13:48:41 +02:00
Min RK
93a34d9874 testing config: enable named servers
for easier testing of more features
2024-04-09 13:48:41 +02:00
Min RK
9d835a8670 make sure navbar, named servers table work in bs5
add test for navbar collapse
2024-04-09 12:48:59 +02:00
Min RK
044a916488 update setup.py css build step for scss 2024-04-09 11:38:06 +02:00
Min RK
47f39e7c2f changelog for 4.1.5 2024-04-09 11:18:00 +02:00
Min RK
5424108593 singleuser mixin: include check_xsrf_cookie in overrides 2024-04-09 11:18:00 +02:00
Min RK
2fe060861a progress toward bootstrap 5 2024-04-04 16:18:01 +02:00
Min RK
cca49486e3 build with sass 2024-04-04 15:58:57 +02:00
Min RK
dfbe7257e6 make it easier to debug static files 2024-04-04 15:58:44 +02:00
Min RK
8c5715621a work on updating to bs5 2024-04-04 12:45:34 +02:00
Min RK
b05b3a30ab autoconvert less to scss
via less2sass:

```
for f in less/*.less; do
    less2sass $f
done

rm -v less/*.less
git mv less scss
```
2024-04-04 12:39:20 +02:00
Min RK
f9fb650a7b Merge pull request #4769 from consideRatio/pr/fix-typo
Fix typo in docstring about Authenticator.blocked_users
2024-04-03 10:49:48 +02:00
Min RK
3ce2643ab7 clarify some allow docs per review 2024-04-02 10:54:17 +02:00
Min RK
3e61e46497 Apply suggestions from code review
Co-authored-by: Simon Li <orpheus+devel@gmail.com>
2024-04-02 10:50:31 +02:00
Erik Sundell
587e6cec4e Fix typo in docstring about Authenticator.blocked_users 2024-04-02 10:42:20 +02:00
Erik Sundell
a6c513c1ac Merge pull request #4767 from jupyterhub/pre-commit-ci-update-config
[pre-commit.ci] pre-commit autoupdate
2024-04-02 08:45:59 +02:00
pre-commit-ci[bot]
b678236f87 [pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/astral-sh/ruff-pre-commit: v0.3.2 → v0.3.5](https://github.com/astral-sh/ruff-pre-commit/compare/v0.3.2...v0.3.5)
2024-04-01 22:10:17 +00:00
Simon Li
11f5759fc7 Merge pull request #4763 from jupyterhub/dependabot/npm_and_yarn/jsx/express-4.19.2
Bump express from 4.18.2 to 4.19.2 in /jsx
2024-04-01 14:35:57 +02:00
Erik Sundell
95db61e613 Merge pull request #4765 from minrk/414-forward
forward-port 4.1.4
2024-03-30 11:10:15 +01:00
Min RK
ab37cd7f24 changelog for 4.1.4 2024-03-30 10:02:43 +01:00
Min RK
26a0be5103 avoid xsrf check on navigate GET requests
sevices/auth prevents calling check_xsrf_cookie,
but if the Handler itself called it the newly strict check would still be applied

this ensures the check is actually allowed for navigate GET requests
2024-03-30 10:02:43 +01:00
dependabot[bot]
9009bf2825 Bump express from 4.18.2 to 4.19.2 in /jsx
Bumps [express](https://github.com/expressjs/express) from 4.18.2 to 4.19.2.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.18.2...4.19.2)

---
updated-dependencies:
- dependency-name: express
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-29 10:03:51 +00:00
Min RK
f0220c87d8 Merge pull request #4755 from minrk/forward-413 2024-03-26 17:35:46 +01:00
Min RK
7d720371c5 changelog for 4.1.3 2024-03-26 14:04:58 +01:00
Min RK
2262bab442 changelog for 4.1.2 2024-03-26 14:04:58 +01:00
Min RK
c08b582c53 respect jupyter-server disable_check_xsrf setting
allows global disable of xsrf checks in single-user servers
2024-03-26 14:04:58 +01:00
Min RK
7e56bf7e2c rework handling of multiple xsrf tokens
rather than attempting to clear multiple tokens (too complicated, breaks named servers)
look for and accept first valid token

have to do our own cookie parsing because existing cookie implementations only return a single value for each key
and default to selecting the _least_ likely to be correct, according to RFCs.

set updated xsrf cookie on login to avoid needing two requests to get the right cookie

# Conflicts:
#	jupyterhub/tests/test_services_auth.py
2024-03-26 14:04:58 +01:00
Min RK
1feb3564c1 apply suggestions from code review
Co-authored-by: Erik Sundell <erik.i.sundell@gmail.com>
2024-03-26 09:00:57 +01:00
Min RK
7e25dd15e6 clarify externally managed group
Co-authored-by: Erik Sundell <erik.i.sundell@gmail.com>
2024-03-26 09:00:01 +01:00
Min RK
f581b1a541 Merge pull request #4743 from minrk/effver
Officially adopt EffVer
2024-03-26 08:59:07 +01:00