aboutsummaryrefslogtreecommitdiffstats
path: root/backend (follow)
Commit message (Collapse)AuthorAgeLines
* Adds Logging For RoutesloggingGravatar Hassan Abouelela2021-03-15-16/+66
| | | | | | | | | Adds logging for most routes, to make it easier to debug the routes, and keep a better record of major changes. Most operations would not get logged, except the beginning of a more sensitive operation, especially ones that require admin permissions. Signed-off-by: Hassan Abouelela <[email protected]>
* Adds Logging To HelpersGravatar Hassan Abouelela2021-03-15-1/+15
| | | | | | | | | Adds logging to the CORS setup, user, and discord helpers. Log statements have been setup in a way to maximize information for local development and prod debugging, while minimizing average load on the prod version. Signed-off-by: Hassan Abouelela <[email protected]>
* Adds Logging SupportGravatar Hassan Abouelela2021-03-15-0/+50
| | | | | | Adds formatters and handlers for logging. Signed-off-by: Hassan Abouelela <[email protected]>
* Fixes Production URL ConstantGravatar Hassan Abouelela2021-03-08-1/+1
| | | | Signed-off-by: Hassan Abouelela <[email protected]>
* Corrects Token Cookie DomainGravatar Hassan Abouelela2021-03-07-4/+2
| | | | | | Removes schema from the token cookie's domain field. Signed-off-by: Hassan Abouelela <[email protected]>
* Switches Forwarded Protocol HeaderGravatar Hassan Abouelela2021-03-07-12/+9
| | | | | | | | Traefik forwards https traffic to http, which causes issues with the protocol in a request's URL. This switch uses the protocol header to correctly set the protocol. Signed-off-by: Hassan Abouelela <[email protected]>
* Corrects Domain On Token CookieGravatar Hassan Abouelela2021-03-07-1/+2
| | | | | | Correctly formats the domain set on the cookie used for tokens. Signed-off-by: Hassan Abouelela <[email protected]>
* Corrects Domain On Token CookieGravatar Hassan Abouelela2021-03-07-2/+3
| | | | Signed-off-by: Hassan Abouelela <[email protected]>
* Fixes Domain URL On Token CookieGravatar Hassan Abouelela2021-03-07-11/+18
| | | | Signed-off-by: Hassan Abouelela <[email protected]>
* Makes Helper To Handle Token SameSite LogicGravatar Hassan Abouelela2021-03-07-19/+45
| | | | | | Adds a helper method to allow tokens to work on deploy previews. Signed-off-by: Hassan Abouelela <[email protected]>
* Revert "Sets Token Cookie To Same Site To Lax"Gravatar Hassan Abouelela2021-03-06-2/+2
| | | | | | This reverts commit 013ea900 Signed-off-by: Hassan Abouelela <[email protected]>
* Sets Token Cookie To Same Site To LaxGravatar Hassan Abouelela2021-03-06-2/+2
| | | | | | | Sets the authorization token cookie's security policy to lax, to allow it to work on the site. Signed-off-by: Hassan Abouelela <[email protected]>
* Formats Authorize FileGravatar Hassan Abouelela2021-03-06-3/+3
| | | | | | | | Cleans up the authorize file, and the __init__ to maintain the project's code style. Co-authored-by: Joe Banks <[email protected]> Signed-off-by: Hassan Abouelela <[email protected]>
* Renames Token To `token` Gravatar Hassan Abouelela2021-03-06-4/+4
| | | | | Changes the name for the token used to authorize with the backend. Co-authored-by: Joe Banks <[email protected]>
* Make Admin Fetch AsyncGravatar Hassan Abouelela2021-03-01-3/+3
| | | | Signed-off-by: Hassan Abouelela <[email protected]>
* Allows All CORS Requests On DevelopmentGravatar Hassan Abouelela2021-03-01-2/+2
| | | | Signed-off-by: Hassan Abouelela <[email protected]>
* Merge branch 'main' into token-expiryGravatar Hassan Abouelela2021-02-28-6/+159
|\ | | | | | | | | | | # Conflicts: # backend/routes/forms/form.py # backend/routes/forms/submit.py
| * Obliterate the _unit_cache variableGravatar Matteo Bertucci2021-02-27-3/+0
| |
| * Use base64 encoded code snippetsGravatar Matteo Bertucci2021-02-26-4/+4
| |
| * Properly hadnle hidden tests starting with test_Gravatar Matteo Bertucci2021-02-25-1/+1
| |
| * Remove unused importGravatar Matteo Bertucci2021-02-25-2/+4
| |
| * Make _make_unit_code more readableGravatar Matteo Bertucci2021-02-25-1/+4
| |
| * Remove unneeded temp variableGravatar Matteo Bertucci2021-02-25-4/+2
| |
| * Only filter units if we aren't using an admin tokenGravatar Matteo Bertucci2021-02-25-1/+2
| |
| * Make use of list.copy() instead of [:]Gravatar Matteo Bertucci2021-02-25-2/+2
| |
| * Don't try to parse the composed codeGravatar Matteo Bertucci2021-02-25-40/+32
| |
| * Make use of .raise_for_status()Gravatar Matteo Bertucci2021-02-25-8/+6
| | | | | | | | Co-authored-by: Hassan Abouelela <[email protected]>
| * Add return code 7 for processes killed by NsJailGravatar Matteo Bertucci2021-02-25-22/+25
| |
| * Add return code 6 for exceptions when loading moduleGravatar Matteo Bertucci2021-02-25-1/+1
| |
| * Properly handle return codes 5 and 99Gravatar Matteo Bertucci2021-02-24-14/+18
| |
| * Document unittest codeGravatar Matteo Bertucci2021-02-24-6/+16
| |
| * Censor unittests on GET /forms/$idGravatar Matteo Bertucci2021-02-24-0/+16
| |
| * Add support for hidden testsGravatar Matteo Bertucci2021-02-24-2/+17
| |
| * Return 403 on failed testsGravatar Matteo Bertucci2021-02-24-1/+1
| |
| * Switch to 100 chars line length and get rid of the noqasGravatar Matteo Bertucci2021-02-24-11/+19
| |
| * Hook up unittesting in the submit protocolGravatar Matteo Bertucci2021-02-24-0/+14
| |
| * Support code unit testing through snekboxGravatar Matteo Bertucci2021-02-24-0/+91
| |
| * Add snekbox to the environmentGravatar Matteo Bertucci2021-02-24-0/+1
| |
* | Dynamically Selects OAuth Redirect URIGravatar Hassan Abouelela2021-02-21-5/+7
| | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
* | Centralizes Admin AuthenticationGravatar Hassan Abouelela2021-02-20-8/+13
| | | | | | | | | | | | | | Sets admin authentication on authenticator to allow the addition and removal of admins without creating a new token. Signed-off-by: Hassan Abouelela <[email protected]>
* | Adds Expiry To Authorization RoutesGravatar Hassan Abouelela2021-02-20-1/+6
| | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
* | Adds CORS RulesGravatar Hassan Abouelela2021-02-20-5/+15
| | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
* | Remove AuthorizationHeaders ClassGravatar Hassan Abouelela2021-02-19-13/+1
| | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
* | Refreshes User Data On Form SubmitGravatar Hassan Abouelela2021-02-19-19/+69
| | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
* | Adds Token Refresh RouteGravatar Hassan Abouelela2021-02-19-16/+93
| | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
* | Adds Production ConstantGravatar Hassan Abouelela2021-02-19-0/+2
|/ | | | Signed-off-by: Hassan Abouelela <[email protected]>
* Add an optional submitted_text field to forms to customize the response upon ↵Gravatar Jannes Jonkers2021-01-20-2/+2
| | | | submitting.
* Add an optional response field to forms to customize the response upon ↵Gravatar Jannes Jonkers2021-01-20-1/+2
| | | | submitting.
* Order discoverable forms alphabeticallyGravatar Joe Banks2021-01-04-1/+1
|
* Use $in operator for non-admin filtering to allow fetching closed formsGravatar ks1292021-01-04-1/+1
| | | This was OPEN before, but we need to return discoverable closed forms too.