68dd972bfa
Add more secure password storage via salt value and hmac
2012-07-18 13:27:30 -04:00
f170cb434c
Use a stateful object instead of arbitrary assignment of extension on app object
2012-07-16 19:07:19 -04:00
507de82aba
Update docs
2012-07-13 16:06:10 -04:00
0a0b5ecade
Get rid of login_required decorator from roles_required and roles_accepted in order to be able to pair http_auth_required with roles_required or roles_accepted. Just be sure to put http_auth_required first.
2012-07-13 13:50:36 -04:00
1d86d33b0b
Add category for messages
2012-07-12 15:39:35 -04:00
18c7a838b0
Make most messages configurable
2012-07-12 15:24:57 -04:00
aba98a3a03
clean up
2012-07-12 14:25:44 -04:00
e9b49b8e9e
clean up
2012-07-12 14:25:10 -04:00
dcdfb4d3e7
Add configurable http auth realm and optional realm specification in http_auth_required decorator
2012-07-12 14:16:54 -04:00
a2d31d1d8d
Add configurable default http auth header
2012-07-12 13:24:59 -04:00
2e9c62b4f8
Refactor decorators a bit
2012-07-12 13:15:58 -04:00
dfcb3cdcc6
Add customizable unauthorized URL. Fixes #23
2012-07-12 12:47:21 -04:00
5e1d18c9e8
Changed token auth a bit, including the use of itsdangerous. Also added JSON authentication feature
2012-07-11 16:31:21 -04:00
74e94b2628
Merge branch 'develop' of github.com:mattupstate/flask-security into develop
2012-06-29 13:18:14 -04:00
2ea835ec9f
Add a bunch of doc strings and add some more configuration values
2012-06-29 12:37:22 -04:00
24cd4938a5
correct roles_* decorator signature expectations
...
Having multiple RoleNeed objects in a Permission does not require
all to be satisfied in order to .can(), but will return True if
any are present. This makes the previous roles_required logic more
elegant for roles_accepted. roles_required decorator needs to check
all permissions individually and return only if all permissions exist
2012-06-22 00:15:43 -05:00
c20f244d66
Big code cleanup
2012-06-18 16:51:43 -04:00
c123e32ddc
decorators for basic http auth and token auth
2012-06-14 18:04:14 -04:00
Matt Wright