aboutsummaryrefslogtreecommitdiffstats
path: root/backend (follow)
Commit message (Collapse)AuthorAgeLines
* Merge branch 'main' into dependabot/pip/sentry-sdk-0.20.3Gravatar Hassan Abouelela2021-03-08-59/+228
|\ | | | | | | | | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]> # Conflicts: # backend/__init__.py # poetry.lock
| * Corrects Token Cookie DomainGravatar Hassan Abouelela2021-03-07-4/+2
| | | | | | | | | | | | Removes schema from the token cookie's domain field. Signed-off-by: Hassan Abouelela <[email protected]>
| * Switches Forwarded Protocol HeaderGravatar Hassan Abouelela2021-03-07-12/+9
| | | | | | | | | | | | | | | | Traefik forwards https traffic to http, which causes issues with the protocol in a request's URL. This switch uses the protocol header to correctly set the protocol. Signed-off-by: Hassan Abouelela <[email protected]>
| * Corrects Domain On Token CookieGravatar Hassan Abouelela2021-03-07-1/+2
| | | | | | | | | | | | Correctly formats the domain set on the cookie used for tokens. Signed-off-by: Hassan Abouelela <[email protected]>
| * Corrects Domain On Token CookieGravatar Hassan Abouelela2021-03-07-2/+3
| | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
| * Fixes Domain URL On Token CookieGravatar Hassan Abouelela2021-03-07-11/+18
| | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
| * Makes Helper To Handle Token SameSite LogicGravatar Hassan Abouelela2021-03-07-19/+45
| | | | | | | | | | | | Adds a helper method to allow tokens to work on deploy previews. Signed-off-by: Hassan Abouelela <[email protected]>
| * Revert "Sets Token Cookie To Same Site To Lax"Gravatar Hassan Abouelela2021-03-06-2/+2
| | | | | | | | | | | | This reverts commit 013ea900 Signed-off-by: Hassan Abouelela <[email protected]>
| * Sets Token Cookie To Same Site To LaxGravatar Hassan Abouelela2021-03-06-2/+2
| | | | | | | | | | | | | | Sets the authorization token cookie's security policy to lax, to allow it to work on the site. Signed-off-by: Hassan Abouelela <[email protected]>
| * Formats Authorize FileGravatar Hassan Abouelela2021-03-06-3/+3
| | | | | | | | | | | | | | | | Cleans up the authorize file, and the __init__ to maintain the project's code style. Co-authored-by: Joe Banks <[email protected]> Signed-off-by: Hassan Abouelela <[email protected]>
| * Renames Token To `token` Gravatar Hassan Abouelela2021-03-06-4/+4
| | | | | | | | | | Changes the name for the token used to authorize with the backend. Co-authored-by: Joe Banks <[email protected]>
| * Make Admin Fetch AsyncGravatar Hassan Abouelela2021-03-01-3/+3
| | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
| * Allows All CORS Requests On DevelopmentGravatar Hassan Abouelela2021-03-01-2/+2
| | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
| * Merge branch 'main' into token-expiryGravatar Hassan Abouelela2021-02-28-6/+159
| |\ | | | | | | | | | | | | | | | # Conflicts: # backend/routes/forms/form.py # backend/routes/forms/submit.py
| * | Dynamically Selects OAuth Redirect URIGravatar Hassan Abouelela2021-02-21-5/+7
| | | | | | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
| * | Centralizes Admin AuthenticationGravatar Hassan Abouelela2021-02-20-8/+13
| | | | | | | | | | | | | | | | | | | | | Sets admin authentication on authenticator to allow the addition and removal of admins without creating a new token. Signed-off-by: Hassan Abouelela <[email protected]>
| * | Adds Expiry To Authorization RoutesGravatar Hassan Abouelela2021-02-20-1/+6
| | | | | | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
| * | Adds CORS RulesGravatar Hassan Abouelela2021-02-20-5/+15
| | | | | | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
| * | Remove AuthorizationHeaders ClassGravatar Hassan Abouelela2021-02-19-13/+1
| | | | | | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
| * | Refreshes User Data On Form SubmitGravatar Hassan Abouelela2021-02-19-19/+69
| | | | | | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
| * | Adds Token Refresh RouteGravatar Hassan Abouelela2021-02-19-16/+93
| | | | | | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
| * | Adds Production ConstantGravatar Hassan Abouelela2021-02-19-0/+2
| | | | | | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]>
* | | Merge branch 'main' into dependabot/pip/sentry-sdk-0.20.3Gravatar Hassan Abouelela2021-02-28-8/+161
|\ \ \ | | |/ | |/| | | | | | | | | | | | | Signed-off-by: Hassan Abouelela <[email protected]> # Conflicts: # poetry.lock
| * | Obliterate the _unit_cache variableGravatar Matteo Bertucci2021-02-27-3/+0
| | |
| * | Use base64 encoded code snippetsGravatar Matteo Bertucci2021-02-26-4/+4
| | |
| * | Properly hadnle hidden tests starting with test_Gravatar Matteo Bertucci2021-02-25-1/+1
| | |
| * | Remove unused importGravatar Matteo Bertucci2021-02-25-2/+4
| | |
| * | Make _make_unit_code more readableGravatar Matteo Bertucci2021-02-25-1/+4
| | |
| * | Remove unneeded temp variableGravatar Matteo Bertucci2021-02-25-4/+2
| | |
| * | Only filter units if we aren't using an admin tokenGravatar Matteo Bertucci2021-02-25-1/+2
| | |
| * | Make use of list.copy() instead of [:]Gravatar Matteo Bertucci2021-02-25-2/+2
| | |
| * | Don't try to parse the composed codeGravatar Matteo Bertucci2021-02-25-40/+32
| | |
| * | Make use of .raise_for_status()Gravatar Matteo Bertucci2021-02-25-8/+6
| | | | | | | | | | | | Co-authored-by: Hassan Abouelela <[email protected]>
| * | Add return code 7 for processes killed by NsJailGravatar Matteo Bertucci2021-02-25-22/+25
| | |
| * | Add return code 6 for exceptions when loading moduleGravatar Matteo Bertucci2021-02-25-1/+1
| | |
| * | Properly handle return codes 5 and 99Gravatar Matteo Bertucci2021-02-24-14/+18
| | |
| * | Document unittest codeGravatar Matteo Bertucci2021-02-24-6/+16
| | |
| * | Censor unittests on GET /forms/$idGravatar Matteo Bertucci2021-02-24-0/+16
| | |
| * | Add support for hidden testsGravatar Matteo Bertucci2021-02-24-2/+17
| | |
| * | Return 403 on failed testsGravatar Matteo Bertucci2021-02-24-1/+1
| | |
| * | Switch to 100 chars line length and get rid of the noqasGravatar Matteo Bertucci2021-02-24-11/+19
| | |
| * | Hook up unittesting in the submit protocolGravatar Matteo Bertucci2021-02-24-0/+14
| | |
| * | Support code unit testing through snekboxGravatar Matteo Bertucci2021-02-24-0/+91
| | |
| * | Add snekbox to the environmentGravatar Matteo Bertucci2021-02-24-0/+1
| |/
* / Sets Sentry SDK EnvironmentGravatar Hassan Abouelela2021-02-21-2/+4
|/ | | | Signed-off-by: Hassan Abouelela <[email protected]>
* Add an optional submitted_text field to forms to customize the response upon ↵Gravatar Jannes Jonkers2021-01-20-2/+2
| | | | submitting.
* Add an optional response field to forms to customize the response upon ↵Gravatar Jannes Jonkers2021-01-20-1/+2
| | | | submitting.
* Order discoverable forms alphabeticallyGravatar Joe Banks2021-01-04-1/+1
|
* Use $in operator for non-admin filtering to allow fetching closed formsGravatar ks1292021-01-04-1/+1
| | | This was OPEN before, but we need to return discoverable closed forms too.
* `jwt.encode` returns a string, not a bytestring.Gravatar kosayoda2020-12-31-3/+1
| | | | | | | As of pyjwt 2.0.0, `jwt.encode` does not return a bytestring, so decoding is unnecessary. ref: https://github.com/jpadilla/pyjwt/blob/c96131b970fd341106ce33d0a85b50e3bdbb67ec/CHANGELOG.md#jwtencode-return-type