aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeLines
* Replace BaseHTTPMiddleware with pure ASGI middlewareGravatar Adrian Garcia Badaracco2022-06-13-11/+19
|
* Merge pull request #168 from python-discord/dependabot/pip/pyjwt-2.4.0Gravatar ChrisJL2022-05-25-5/+5
|\ | | | | Bump pyjwt from 2.3.0 to 2.4.0
| * Bump pyjwt from 2.3.0 to 2.4.0Gravatar dependabot[bot]2022-05-25-5/+5
|/ | | | | | | | | | | | | | Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.3.0 to 2.4.0. - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](https://github.com/jpadilla/pyjwt/compare/2.3.0...2.4.0) --- updated-dependencies: - dependency-name: pyjwt dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
* Merge pull request #135 from python-discord/rolesGravatar Kieran Siek2022-03-20-89/+455
|\ | | | | Overhaul Access System
| * Merge branch 'main' into rolesGravatar Kieran Siek2022-03-20-282/+510
| |\ | |/ |/|
* | Merge pull request #151 from python-discord/dependabot/pip/sentry-sdk-1.5.7Gravatar Hassan Abouelela2022-03-13-5/+5
|\ \ | | | | | | Bump sentry-sdk from 1.5.4 to 1.5.7
| * | Bump sentry-sdk from 1.5.4 to 1.5.7Gravatar dependabot[bot]2022-03-13-5/+5
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from 1.5.4 to 1.5.7. - [Release notes](https://github.com/getsentry/sentry-python/releases) - [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-python/compare/1.5.4...1.5.7) --- updated-dependencies: - dependency-name: sentry-sdk dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
* | Merge pull request #141 from python-discord/dependabot/pip/flake8-4.0.1Gravatar Hassan Abouelela2022-03-13-15/+15
|\ \ | | | | | | Bump flake8 from 3.9.2 to 4.0.1
| * | Bump flake8 from 3.9.2 to 4.0.1Gravatar dependabot[bot]2022-03-13-15/+15
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [flake8](https://github.com/pycqa/flake8) from 3.9.2 to 4.0.1. - [Release notes](https://github.com/pycqa/flake8/releases) - [Commits](https://github.com/pycqa/flake8/compare/3.9.2...4.0.1) --- updated-dependencies: - dependency-name: flake8 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>
* | Merge pull request #149 from python-discord/dependabot/pip/spectree-0.7.6Gravatar Hassan Abouelela2022-03-13-6/+6
|\ \ | | | | | | Bump spectree from 0.7.2 to 0.7.6
| * | Bump spectree from 0.7.2 to 0.7.6Gravatar dependabot[bot]2022-03-13-6/+6
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [spectree](https://github.com/0b01001001/spectree) from 0.7.2 to 0.7.6. - [Release notes](https://github.com/0b01001001/spectree/releases) - [Commits](https://github.com/0b01001001/spectree/compare/v0.7.2...v0.7.6) --- updated-dependencies: - dependency-name: spectree dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
* | Merge pull request #152 from python-discord/dependabot/pip/starlette-0.19.0Gravatar Hassan Abouelela2022-03-13-6/+10
|\ \ | | | | | | Bump starlette from 0.14.2 to 0.19.0
| * | Bump starlette from 0.14.2 to 0.19.0Gravatar dependabot[bot]2022-03-13-6/+10
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [starlette](https://github.com/encode/starlette) from 0.14.2 to 0.19.0. - [Release notes](https://github.com/encode/starlette/releases) - [Changelog](https://github.com/encode/starlette/blob/master/docs/release-notes.md) - [Commits](https://github.com/encode/starlette/compare/0.14.2...0.19.0) --- updated-dependencies: - dependency-name: starlette dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
* | Merge pull request #153 from python-discord/dependabot/pip/uvicorn-0.17.6Gravatar Hassan Abouelela2022-03-13-32/+42
|\ \ | | | | | | Bump uvicorn from 0.17.4 to 0.17.6
| * | Bump uvicorn from 0.17.4 to 0.17.6Gravatar dependabot[bot]2022-03-11-32/+42
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [uvicorn](https://github.com/encode/uvicorn) from 0.17.4 to 0.17.6. - [Release notes](https://github.com/encode/uvicorn/releases) - [Changelog](https://github.com/encode/uvicorn/blob/master/CHANGELOG.md) - [Commits](https://github.com/encode/uvicorn/compare/0.17.4...0.17.6) --- updated-dependencies: - dependency-name: uvicorn dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
* | Merge pull request #145 from python-discord/fix-eval-exploitsGravatar Hassan Abouelela2022-02-24-8/+15
|\ \
| * | Handle BaseException In Code QuestionGravatar Hassan Abouelela2022-02-15-4/+11
| | | | | | | | | | | | | | | | | | | | | | | | Change the exception handler in the unittest template to handle BaseExceptions that don't inherit from Exception. Additionally, account for user invoked system exits. Signed-off-by: Hassan Abouelela <[email protected]>
| * | Patch `sys.__stdout__` In Code QuestionsGravatar Hassan Abouelela2022-02-15-4/+4
|/ / | | | | | | | | | | | | | | Patching just `sys.stdout` allowed users to still access stdout via `sys.__stdout__`. The same was true for stderr. Both have been explicitly patched now. Signed-off-by: Hassan Abouelela <[email protected]>
* | Merge pull request #140 from python-discord/bump-uvicornGravatar Hassan Abouelela2022-02-05-215/+339
|\ \ | | | | | | Bump uvicorn from 0.13.4 to 0.17.4
| * | Bump uvicorn from 0.13.4 to 0.17.4Gravatar Hassan Abouelela2022-02-05-215/+339
|/ / | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
* | Create SECURITY.mdGravatar Hassan Abouelela2022-02-05-0/+3
| | | | | | Copy the security policy from our other projects.
* | Merge pull request #136 from ↵Gravatar Hassan Abouelela2022-02-05-7/+7
|\ \ | | | | | | | | | | | | python-discord/dependabot/pip/flake8-annotations-2.7.0 Bump flake8-annotations from 2.6.2 to 2.7.0
| * | Bump flake8-annotations from 2.6.2 to 2.7.0Gravatar dependabot[bot]2022-02-05-7/+7
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [flake8-annotations](https://github.com/sco1/flake8-annotations) from 2.6.2 to 2.7.0. - [Release notes](https://github.com/sco1/flake8-annotations/releases) - [Changelog](https://github.com/sco1/flake8-annotations/blob/main/CHANGELOG.md) - [Commits](https://github.com/sco1/flake8-annotations/compare/v2.6.2...v2.7.0) --- updated-dependencies: - dependency-name: flake8-annotations dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
* | Merge pull request #133 from python-discord/dependabot/pip/httpx-0.22.0Gravatar Hassan Abouelela2022-02-05-12/+54
|\ \ | | | | | | Bump httpx from 0.17.1 to 0.22.0
| * | Bump httpx from 0.17.1 to 0.22.0Gravatar dependabot[bot]2022-02-05-12/+54
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [httpx](https://github.com/encode/httpx) from 0.17.1 to 0.22.0. - [Release notes](https://github.com/encode/httpx/releases) - [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md) - [Commits](https://github.com/encode/httpx/compare/0.17.1...0.22.0) --- updated-dependencies: - dependency-name: httpx dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
* | Merge pull request #119 from python-discord/dependabot/pip/deepmerge-1.0.1Gravatar Hassan Abouelela2022-02-05-5/+5
|\ \ | | | | | | Bump deepmerge from 0.2.1 to 1.0.1
| * | Bump deepmerge from 0.2.1 to 1.0.1Gravatar dependabot[bot]2022-02-05-5/+5
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [deepmerge](https://github.com/toumorokoshi/deepmerge) from 0.2.1 to 1.0.1. - [Release notes](https://github.com/toumorokoshi/deepmerge/releases) - [Commits](https://github.com/toumorokoshi/deepmerge/commits) --- updated-dependencies: - dependency-name: deepmerge dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>
* | Merge pull request #134 from python-discord/dependabot/pip/spectree-0.7.2Gravatar Hassan Abouelela2022-02-05-6/+43
|\ \ | | | | | | Bump spectree from 0.4.2 to 0.7.2
| * | Bump spectree from 0.4.2 to 0.7.2Gravatar dependabot[bot]2022-02-05-6/+43
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [spectree](https://github.com/0b01001001/spectree) from 0.4.2 to 0.7.2. - [Release notes](https://github.com/0b01001001/spectree/releases) - [Commits](https://github.com/0b01001001/spectree/compare/v0.4.2...v0.7.2) --- updated-dependencies: - dependency-name: spectree dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
* | Merge pull request #137 from python-discord/dependabot/pip/urllib3-1.26.5Gravatar Hassan Abouelela2022-02-05-3/+3
|\ \ | | | | | | Bump urllib3 from 1.26.3 to 1.26.5
| * | Bump urllib3 from 1.26.3 to 1.26.5Gravatar dependabot[bot]2022-02-05-3/+3
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.3 to 1.26.5. - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](https://github.com/urllib3/urllib3/compare/1.26.3...1.26.5) --- updated-dependencies: - dependency-name: urllib3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]>
* | Merge pull request #139 from python-discord/dependabot/pip/pydantic-1.9.0Gravatar Hassan Abouelela2022-02-05-25/+25
|\ \ | | | | | | Bump pydantic from 1.8.1 to 1.9.0
| * | Bump pydantic from 1.8.1 to 1.9.0Gravatar dependabot[bot]2022-02-05-25/+25
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [pydantic](https://github.com/samuelcolvin/pydantic) from 1.8.1 to 1.9.0. - [Release notes](https://github.com/samuelcolvin/pydantic/releases) - [Changelog](https://github.com/samuelcolvin/pydantic/blob/master/HISTORY.md) - [Commits](https://github.com/samuelcolvin/pydantic/compare/v1.8.1...v1.9.0) --- updated-dependencies: - dependency-name: pydantic dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
* | Merge pull request #115 from python-discord/dependabot/pip/python-dotenv-0.19.2Gravatar Hassan Abouelela2022-02-05-6/+6
|\ \ | | | | | | Bump python-dotenv from 0.17.0 to 0.19.2
| * | Bump python-dotenv from 0.17.0 to 0.19.2Gravatar dependabot[bot]2022-02-05-6/+6
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [python-dotenv](https://github.com/theskumar/python-dotenv) from 0.17.0 to 0.19.2. - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/master/CHANGELOG.md) - [Commits](https://github.com/theskumar/python-dotenv/compare/v0.17.0...v0.19.2) --- updated-dependencies: - dependency-name: python-dotenv dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
* | Merge pull request #111 from python-discord/dependabot/pip/pyjwt-2.3.0Gravatar Hassan Abouelela2022-02-05-10/+11
|\ \ | | | | | | Bump pyjwt from 2.0.1 to 2.3.0
| * | Bump pyjwt from 2.0.1 to 2.3.0Gravatar dependabot[bot]2022-02-05-10/+11
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.0.1 to 2.3.0. - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](https://github.com/jpadilla/pyjwt/compare/2.0.1...2.3.0) --- updated-dependencies: - dependency-name: pyjwt dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
| * Explicitly Use `_id` Over `id`Gravatar Hassan Abouelela2022-03-14-4/+4
| | | | | | Co-authored-by: Kieran Siek <[email protected]>
| * Add Default Attribute For Form Access HelperGravatar Hassan Abouelela2022-03-14-1/+1
| | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
| * Ensure Form Existence Is Always CheckedGravatar Hassan Abouelela2022-02-11-4/+4
| | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
| * Use HTTPException To Propagate Access FailuresGravatar Hassan Abouelela2022-02-05-40/+26
| | | | | | | | | | Co-authored-by: Bluenix <[email protected]> Signed-off-by: Hassan Abouelela <[email protected]>
| * Switch To List CompGravatar Hassan Abouelela2022-02-05-8/+2
| | | | | | | | | | Co-authored-by: Bluenix <[email protected]> Signed-off-by: Hassan Abouelela <[email protected]>
| * Fix Linting ErrorsGravatar Hassan Abouelela2022-02-05-8/+8
| | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
| * Add Docs For Editors & Response Readers PropsGravatar Hassan Abouelela2022-02-05-17/+20
| | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
| * Add Role Based Editors To FormsGravatar Hassan Abouelela2022-02-05-34/+51
| | | | | | | | | | | | Adds the ability to specify who can edit forms using discord roles. Signed-off-by: Hassan Abouelela <[email protected]>
| * Add Role Based Authorized ReadersGravatar Hassan Abouelela2022-02-05-14/+73
| | | | | | | | | | | | | | Adds a new property on forms to declare which roles are authorized to access form responses. Signed-off-by: Hassan Abouelela <[email protected]>
| * Overhaul Scope SystemGravatar Hassan Abouelela2022-02-05-60/+246
| | | | | | | | | | | | | | Adds discord role support to the pre-existing scopes system to power more complex access permissions. Signed-off-by: Hassan Abouelela <[email protected]>
| * Add Helper Functions For Managing RolesGravatar Hassan Abouelela2022-01-22-9/+130
|/ | | | Signed-off-by: Hassan Abouelela <[email protected]>
* Merge pull request #132 from python-discord/anon-webhooksGravatar Hassan Abouelela2022-01-21-1/+5
|\
| * Don't include user mention for anonymous form submissionsGravatar Chris Lovering2022-01-21-1/+5
|/ | | | | | We currently use WEBHOOK_ENABLED to determine whether user data should be stored to the db. However, when webhooking a form submission this config is ignored, and the user mention is always included if available. This means that if a user login in using another form, and then submits an anonymous form with the same session, their name will be included in the webhook.