summaryrefslogtreecommitdiff
path: root/service/pixelated/resources
AgeCommit message (Collapse)Author
2016-12-05no difference between dev and prod static filesRoald de Vries
2016-12-05remove templates folder from root resource parametersRoald de Vries
2016-12-05use static instead of {startup,public}-assetsRoald de Vries
2016-12-05get templates from pkg_resourcesRoald de Vries
2016-12-02[#625, #851] fixing log typo and adding test making sure encryption error ↵NavaL
does propagate to mails resources
2016-12-02[refactor] move app dir into public dirZara Gebru
2016-12-01[#849] Change unauthorized messageTulio Casagrande
2016-12-01use the right inbox templateRoald de Vries
2016-12-01WIP: add csrf token to every requestRoald de Vries
2016-11-30add csrf token to login formRoald de Vries
2016-11-30log a warnin when root child is not explicitly public/protectedRoald de Vries
2016-11-30remove PublicRootResource and use a flag on RootResource insteadRoald de Vries
2016-11-30redirect to login from root url when not logged inRoald de Vries
2016-11-29make login resource part of the public root resourceRoald de Vries
2016-11-29add inbox resourceRoald de Vries
2016-11-29Merge branch 'master' into signupRoald de Vries
2016-11-29root resource inherits from public rootRoald de Vries
2016-11-29move adding csrf to base resourceRoald de Vries
2016-11-29return resource instead of username/avatarId as avatarRoald de Vries
2016-11-28split inbox resource out of root resourceRoald de Vries
2016-11-25make credentialsFactories parameter to auth session wrapper optionalRoald de Vries
2016-11-24add login resource as child of public root resourceRoald de Vries
2016-11-24add public root resource to serve static filesRoald de Vries
2016-11-23Adds traceback to logs.Denis Costa
2016-11-18serve signup page through twistedRoald de Vries
2016-11-02Fix logger variable nameTulio Casagrande
2016-10-28changed import, for snap-CI pep8NavaL
2016-10-28removing obsolete Leap_password_checker #795NavaL
2016-10-28authentication now returns AuthenticationNavaL
leap session creation is only done post-interstitial and that logic is also extracted into its own class #795
2016-10-19Adapted login to ignore anything after @ charBruno Wagner
2016-10-19Adapted logging in the UA to use twisted.loggerBruno Wagner
2016-10-11[#792] Move leap.bonafide to leap.bitmask.bonafideTulio Casagrande
2016-10-05remove `set_portal`, it's not neededRoald de Vries
2016-10-05remove pixelated realm's init parametersRoald de Vries
They weren't used. Currently, the PixelatedAuthSessionWrapper determines the resource to use for a user. It would be more idiomatic to have the realm determine that. Actually, it should return the avatar as an IResource. See http://twistedmatrix.com/documents/current/web/howto/web-in-60/http-auth.html
2016-10-05Revert "remove pixelated realm's init parameters"Roald de Vries
This reverts commit 8fa81ff3b2cf0422098395ec9918d5b547fbbca5.
2016-10-05remove pixelated realm's init parametersRoald de Vries
They weren't used. Currently, the PixelatedAuthSessionWrapper determines the resource to use for a user. It would be more idiomatic to have the realm determine that. Actually, it should return the avatar as an IResource. See http://twistedmatrix.com/documents/current/web/howto/web-in-60/http-auth.html
2016-09-28actually 404-ing valid requests but non-existing resourceNavaL
Issue #684
2016-09-26Ensuring 503 is thrown whenever the root_resource is not yet initialized, ↵NavaL
for all cases, not just when it is csrf valid. Issue #684
2016-09-23Replace SRPSession usages with bonafideTulio Casagrande
In order to replace leap_auth with bonafide, we created a class to hold the user credentials
2016-09-23Fixes typo.Denis Costa
2016-09-23Adds translation to welcome mail.Denis Costa
2016-09-13[#778] Renaming get_key to be consistent with keymanagerTulio Casagrande
2016-08-31Reading interstitial on class initBruno Wagner
The interstitial was being read at every login request, that was a blocking read on the main loop for every user. That file was also being opened and not closed at every request, that would aggravate the 'too many open files' problem
2016-08-19Normalizing single and multi user bootstrap #759Bruno Wagner
Consolidated authentication to always be done is a defer to thread and changed the authenticate_user method name to conform with what it actually does
2016-07-04Issue #738: Bypass cookie validation for sandboxFelix Hammerl
2016-06-28Normalize i18n keysTulio Casagrande
2016-06-27Csrf not being enforced on GETCaio Carrara
2016-06-27Fix xsrf-token verification in async callsCaio Carrara
The previous behaviour only checked xsrf-token in headers, but it can be informed in a token as well.
2016-06-24Issue #694 add an admin restricted resource for user statsNavaL
2016-06-23refactoring: renaming services factory methods to relate them to user ↵NavaL
services sessions