3681823fcf
Include WWW-Authenticate headers in @auth_required.
...
When using @http_auth_required, the WWW-Authenticate header is included,
but when using @auth_required('basic'), it is not. This change includes
that header in every @auth_required call that contains the 'basic'
method.
2015-01-30 11:27:53 +01:00
c7d0ea9cce
Add additional item to CHANGES
2014-10-13 13:47:35 -04:00
94c7c09dc2
Bump version number to 1.7.4
2014-10-13 13:38:44 -04:00
f6405797f1
Update CHANGES
2014-10-13 13:38:16 -04:00
2cffb6634d
Fix case sensitivity when searching for users by email address. Fixes #323 .
2014-10-13 13:34:11 -04:00
824a52b883
Merge branch 'develop' of github.com:mattupstate/flask-security into develop
2014-10-13 13:25:08 -04:00
fe7e4c4afc
Add additional steps to the test_change_hash_type and make change to verify_and_update_password to make the test pass. Fixes #328 .
2014-10-13 13:25:01 -04:00
591bc27a5e
Merge pull request #318 from boydgreenfield/develop
...
Prevent open redirects when a malformed URL is passed to ?next=
2014-10-13 11:54:32 -04:00
5bc37add88
Update to use (url_next.netloc or url_next.scheme) in the validate_redirect_url open redirect patch.
2014-10-01 09:49:00 -07:00
8b036f2a3e
Prevent open redirects when a malformed URL is passed to ?next=
...
Example: "/login?next=http:///google.com " (note 3rd slash)
2014-09-26 11:08:58 -07:00
76ad77a233
Compare a string (not bytes) for PY3 support
2014-09-17 11:39:19 -04:00
679cee7969
Add default/global context processor. Fixes #306
2014-09-17 11:27:44 -04:00
3d7b97ac31
Forgot password form should not validate if user has not confirmed their email address yet. Fixes #298
2014-09-17 11:21:31 -04:00
3a0af73231
Merge pull request #281 from sjml/patch-1
...
Fixing typo in documentation
2014-09-17 10:03:53 -04:00
3458391791
Merge pull request #284 from tony/patch-1
...
Typo
2014-09-17 10:02:27 -04:00
37908ca335
Merge pull request #303 from graup/patch-1
...
Docs: Fixed typo and made punctuation more consistent.
2014-09-17 10:02:16 -04:00
f83cd56ff2
Merge pull request #311 from moorereason/develop
...
Fix small issues in docs
2014-09-17 10:01:57 -04:00
c10ec29fe5
Fix small issues in docs
2014-09-07 21:37:33 -05:00
d2fe7aefcb
Merge pull request #307 from mickey06/develop
...
Save changes to db after removal of role from user
2014-08-29 12:19:26 -04:00
708ddeb6c4
Merge pull request #309 from gregeinfrank/develop
...
Fix two typos in docstrings
2014-08-29 12:15:20 -04:00
2aeee348d4
Fix two typos in docstrings
2014-08-27 23:37:58 -04:00
52b177cd2e
Save changes to db after removal of role from user
2014-08-26 16:43:23 +01:00
dab2fc8c8b
Docs: Fixed typo and made punctuation more consistent.
2014-08-19 18:01:03 +09:00
31e3ab5470
Merge pull request #289 from scollinson/fix_menu_typo
...
Fix a typo in the menu template
2014-08-13 15:44:20 -04:00
6bdcd2930d
Merge pull request #278 from dokterbob/post_register_redirect
...
Enable ‘next’ redirection after registration.
2014-07-29 13:23:42 -04:00
1076887900
fix typo in menu template
2014-07-21 19:07:12 +12:00
285fe888da
Typo
...
s/tempalte/template
2014-07-16 14:35:47 -07:00
bf139847cb
Fixing typo in documentation
...
Just a small usage error. :)
2014-07-11 23:45:00 -07:00
15c9ef1d07
Attempt to fix tests.
2014-07-03 15:48:55 +02:00
d1ec38ea18
Keep value of ‘next’ in menu links.
...
This allows moving from the login to registration (and vice versa) while keeping the redirection URL, enabling a much smoother user experience.
2014-07-03 15:22:56 +02:00
577a3a8110
Enable ‘next’ redirection after registration.
2014-07-03 15:21:03 +02:00
7b474efd7a
Bump version number to 1.7.3
2014-06-10 13:05:24 -04:00
f12bc17e7e
Merge branch 'develop'
2014-06-10 13:05:12 -04:00
999f882f61
Update CHANGES
2014-06-10 13:05:06 -04:00
a140c01b57
Add python3.4 to travis and tox
2014-06-10 12:40:12 -04:00
76cf3eaf6a
Do not expose user info in /reset responses. Fixes #249
2014-06-10 12:24:19 -04:00
a6b5d3053c
Use safe_str_cmp when evaluating tokens. Fixes #252
2014-06-10 12:14:58 -04:00
0a48997fdd
Improve encoding of strings. Addresses #231 and #253
2014-06-10 11:47:35 -04:00
96f1b3e0d1
Fix tests to pass python 3
2014-06-10 11:12:40 -04:00
0facdaacd9
Make validate_redirect_url smarter. Fixes #261 .
2014-06-10 10:48:56 -04:00
9cadf855a4
Adjust POST_LOGIN_VIEW and POST_LOGOUT_VIEW test
2014-06-10 10:42:28 -04:00
f387759cee
Bump version number to 1.7.2
2014-05-06 14:05:27 -04:00
faa9f65596
Update CHANGES
2014-05-06 14:04:44 -04:00
3d5b37cef2
Polish for static analysis
2014-05-06 13:14:25 -04:00
d185407ac4
Add mock X-Forwarded-For header in trackable tests
2014-05-06 13:14:14 -04:00
58b7fa8e2e
Check X-Forwarded-For header value when tracking IP addresses. Fixes #234
2014-05-06 12:35:50 -04:00
721b985bc4
Something about a bug...
2014-05-06 11:59:28 -04:00
b08d7c2085
Clean up tests with some pytest marking
2014-05-06 11:58:39 -04:00
fff71e3e04
Polish
2014-05-06 07:57:00 -04:00
546680a94b
Polish
2014-03-14 15:33:25 -04:00
Nuno Santos