summaryrefslogtreecommitdiff
path: root/service/pixelated/resources/root_resource.py
AgeCommit message (Collapse)Author
2016-11-30log a warnin when root child is not explicitly public/protectedRoald de Vries
2016-11-30remove PublicRootResource and use a flag on RootResource insteadRoald de Vries
2016-11-30redirect to login from root url when not logged inRoald de Vries
2016-11-29make login resource part of the public root resourceRoald de Vries
2016-11-29root resource inherits from public rootRoald de Vries
2016-11-29move adding csrf to base resourceRoald de Vries
2016-11-28split inbox resource out of root resourceRoald de Vries
2016-11-24add login resource as child of public root resourceRoald de Vries
2016-11-24add public root resource to serve static filesRoald de Vries
2016-11-18serve signup page through twistedRoald de Vries
2016-10-28changed import, for snap-CI pep8NavaL
2016-10-28authentication now returns AuthenticationNavaL
leap session creation is only done post-interstitial and that logic is also extracted into its own class #795
2016-09-28actually 404-ing valid requests but non-existing resourceNavaL
Issue #684
2016-09-26Ensuring 503 is thrown whenever the root_resource is not yet initialized, ↵NavaL
for all cases, not just when it is csrf valid. Issue #684
2016-08-31Reading interstitial on class initBruno Wagner
The interstitial was being read at every login request, that was a blocking read on the main loop for every user. That file was also being opened and not closed at every request, that would aggravate the 'too many open files' problem
2016-06-27Csrf not being enforced on GETCaio Carrara
2016-06-27Fix xsrf-token verification in async callsCaio Carrara
The previous behaviour only checked xsrf-token in headers, but it can be informed in a token as well.
2016-06-24Issue #694 add an admin restricted resource for user statsNavaL
2016-06-02RootResource should return 503 during startup (#699)Blake Williams
Return 503 code while RootResource is in MODE_STARTUP
2016-03-09Issue #617: Serve content from Sandbox resourceFelix Hammerl
2016-02-25only adding feature resource in root_resource test -- fixing buildNavaL
Issue #612
2016-02-25Backend and frontend protection against csrf attacks:NavaL
- root resources changes the csrf token cookie everytime it is loaded, in particular during the intestitial load during login - it will also add that cookie on single user mode - initialize will still load all resources - but they you cant access them if the csrf token do not match - all ajax calls needs to add the token to the header - non ajax get requests do not need xsrf token validation - non ajax post will have to send the token in as a form input or in the content Issue #612
2016-02-11adds argument to supply custom disclaimer/banner on login screenNavaL
Issue #598
2016-02-03reverting unnecessary steps to not re-load leap-sessions on re-login, as ↵NavaL
they are already cached from leap side - fixing build Issue #590
2016-02-03move leap session creation to be done after interstitial is loadedNavaL
Issue #590
2016-01-22re-introduced logout functionality for multi-userNavaL
Issue #576
2016-01-22Add mutli-user mode to user-agentFolker Bernitt
- Issue #576 - To start in multi user, run with --multi-user --provider provider-name.tld
2016-01-19Make RootResource read account email from mail serviceFolker Bernitt
- Issue #576
2016-01-18root resource now depends on the services factory -- and mail service, for ↵NavaL
now -- Issue #576
2016-01-18migrating account settings resource to use services factoryNavaL
Issue #576
2016-01-18migrating feedback resources to use services factoryNavaL
Issue #576
2016-01-18migrating mail resources to use services factoryNavaL
Issue #576
2016-01-18migrating mails resources to use services factoryNavaL
Issue #576
2016-01-18migrating tag resources to use services factoryNavaL
Issue #576
2016-01-18migrating contact resources to use the services factoryNavaL
Issue #576
2016-01-18migrating AttachmentsResources to use the service factoryNavaL
Issue #576
2016-01-18Refactory KeyResource to get services from sessionFolker Bernitt
- Issue #576 - Only first step (other services not changed yet) - Faked session access for now
2015-12-18backend that handles post of a single attachment filemnandri
Issue #548
2015-12-03Issue #411 - Display user email in user settings popup [w/ @jeffhsta]Gislene Pereira
2015-11-09use mail_service to inject account_email into root_resourcesw00
instead of using leap_session, mail_service can be used to get the account email.
2015-11-09template user's email address into titlesw00
this should solve https://github.com/pixelated/pixelated-user-agent/issues/246 needed to inject leap_session into root resource to access user email on request.
2015-10-22Move interstitial to root resourceFolker Bernitt
- Issue #501 - Moves assets to startup-assets - No more switching between twisted resources at runtime
2015-09-21#442 Creates feedback service that create tickets on leap web.Giovane
2015-06-09AttachmentsResource don't need querier anymore, RootResource doesn't need it tooBruno Wagner
2015-04-13Removed info sync because we have a loading page nowBruno Wagner
2015-02-13Adding encryption info for a recipient when composing.Duda Dornelles
To do that we look into the KeysResouce to see if we will find a key for each address entered for the recipients.
2015-02-04Refactoring more of resource logic into service. No more search engine on ↵Duda Dornelles
mail(s) resource
2015-01-22 #224 fixing tests and app for twisted migrationDuda Dornelles
2015-01-21Fixed pep8 warningsBruno Wagner
2015-01-21#224 App is working without klein - migration to twisted "complete"Duda Dornelles