Commit Graph

813 Commits

Author SHA1 Message Date
Trevor Mack f4182b868a document the decode_base64 endpoint /base64/:value on the index.html page 2018-02-05 10:11:39 -08:00
Ian Stapleton Cordasco 07418017b2 Merge pull request #424 from kennethreitz/check_auth_header
Send digest-auth challenge for wrong Authorization header
2018-02-03 08:50:41 -06:00
Nate Prewitt 82d7408267 send digest-auth challenge if wrong authorization type sent 2018-01-31 23:47:52 -08:00
Ian Stapleton Cordasco 96c5e71c8e Merge pull request #425 from kennethreitz/remove_content_type_check
Remove test for empty Content-Type
2018-01-30 09:15:27 -06:00
Nate Prewitt 75c83178c1 Remove test for empty Content-Type
Werkzeug 14.0.0 introduced new behaviour stripping falsey
values from being included in EnvironHeaders.
2018-01-28 18:59:44 -08:00
kennethreitz bec4514992 Merge pull request #414 from graingert/patch-1
s/explicityly/explicitly/
2017-12-18 11:49:33 -05:00
Thomas Grainger bb95fe610a s/explicityly/explicitly/ 2017-12-18 16:13:05 +00:00
kennethreitz f6c98bd4b8 Merge pull request #386 from vanillajonathan/patch-1
Add endpoint for Bearer authentication
2017-12-18 11:09:18 -05:00
kennethreitz c0f5f0a57f Merge pull request #405 from javabrett/support-chunked-340
Added support for chunked encoded requests when running gunicorn. #340
2017-12-18 11:08:18 -05:00
kennethreitz c2a332d9bd Merge pull request #410 from kennethreitz/bug/403
Limit python setup.py test to our tests
2017-12-18 11:07:26 -05:00
Ian Stapleton Cordasco 6fd0adba84 Include tests in package 2017-12-09 19:12:41 -06:00
Ian Stapleton Cordasco 6216041859 Limit python setup.py test to our tests
Tell unittest.discover specifically what to look for instead of letting
them scan the entirety of our directory (which could have other
dependencies downloaded with their tests that will fail).

Closes #403
2017-12-09 09:06:02 -06:00
Brett Randall ec79fee28a Dropped logger-warning for input_terminated to debug. 2017-12-01 09:06:50 +11:00
Brett Randall 9e9cb84724 Added support for chunked encoded requests when running gunicorn. Fixed #340.
In this commit:

- when we see a Transfer-Encoding: chunked request, and the server is gunicorn,
  we set environ wsgi.input_terminated, which is required by Werkzeug in the
  absence of Content-Lenght, or it will empty the data stream.
- for chunked requests to non-gunicorn, return 501 Not Implemented.
2017-12-01 09:06:50 +11:00
kennethreitz 260ee9b431 Merge pull request #406 from javabrett/patch-1
Added a Travis build-status image
2017-11-28 10:06:52 -06:00
Brett Randall 76cb701e9b Added a Travis build-status image 2017-11-28 16:44:46 +11:00
Ian Stapleton Cordasco 5b9bb956ba Merge pull request #404 from javabrett/tox-py36
Updated tox and Travis to use py36.
2017-11-27 07:09:06 -06:00
Brett Randall d2ca5e0b8a Updated tox and Travis to use py36.
- Added a matrix config to Travis to align tox an travis environments.
- Locked dist to trusty
2017-11-27 12:06:06 +11:00
Nate Prewitt 194df2e828 Merge pull request #401 from linuxlizard/master
add SHA-512 authentication
2017-11-19 09:22:56 -08:00
David Poole f0f3da7b52 add SHA-512 authentication 2017-11-19 08:42:09 -07:00
kennethreitz d9678dac45 Merge pull request #399 from AdamWill/no-flask-limiter
Don't require flask-limiter
2017-11-17 08:45:24 -05:00
Adam Williamson 8bc97fde62 Don't require flask-limiter
The rate limiting code has been ping ponged several times, but
currently it's not there, so there is no reason to require
flask-limiter.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2017-11-16 19:45:08 -08:00
Ian Stapleton Cordasco 75aca52834 Merge pull request #391 from vanillajonathan/patch-3
Use the algorithm parameter
2017-10-19 07:50:18 -05:00
Ian Stapleton Cordasco 24d80ffed7 Bump version to 0.6.2 2017-10-19 07:19:03 -05:00
Ian Stapleton Cordasco 74c25ca993 Merge pull request #392 from kennethreitz/bug/380
Add back fake cookie and make requiring it conditional
2017-10-17 07:49:39 -05:00
Ian Stapleton Cordasco 1bf7a6f23b Add back fake cookie and make requiring it conditional
Our digest auth endpoint will once again return a fake cookie but will
only require it if the query-string parameter `require-cookie` is
present.

Further, this fixes a bug in the digest auth implementation in httpbin
where we were only considering the path portions of the request-uri in
the specification. RFC 7230 is very clear that the request-uri includes
the query-string if it is present which means it is necessary in our
digest auth handling.
2017-10-15 10:06:04 -05:00
Jonathan 29f6bbb683 Use the algorithm parameter 2017-10-11 18:39:31 +02:00
Jonathan c432e7819f Add endpoint for Bearer authentication
Closes #385
2017-09-24 21:48:09 +02:00
kennethreitz cd60b61d77 Merge pull request #382 from jabagawee/patch-1
Change base Dockerfile from Python 2 to Python 3
2017-09-08 10:54:58 -04:00
Andrew Szeto d76add4d7f Change base Dockerfile from Python 2 to Python 3
As @kennethreitz likes to say:

> The use of Python 3 is highly preferred over Python 2. Consider upgrading
> your applications and infrastructure if you find yourself still using Python
> 2 in production today. If you are using Python 3, congratulations — you are
> indeed a person of excellent taste.
2017-09-07 23:37:09 -07:00
Kevin McCarthy 8162241f21 bump version 2017-08-27 09:11:32 -10:00
Kevin McCarthy 672f3472ed Revert "chunked encoding"
This reverts commit 2e94212886.

This didn't fix the problem, and caused other issues when using werkzeug
to execute httpbin, so let's remove it.  See also: #340
2017-08-27 09:10:34 -10:00
kennethreitz cf68882552 uuid4 2017-08-26 14:26:49 -04:00
kennethreitz 1cfd39b74c Merge pull request #379 from chassing/master
bump version to 0.6.0
2017-08-25 14:48:00 -04:00
Christian Assing f64502eb4e bump version to 0.6.0
all lot of changes since June 2016
2017-08-25 20:33:33 +02:00
kennethreitz b5466a026a btc
Signed-off-by: Kenneth Reitz <me@kennethreitz.org>
2017-08-20 20:46:36 -04:00
kennethreitz 0167fd01be coins
Signed-off-by: Kenneth Reitz <me@kennethreitz.org>
2017-08-20 20:38:07 -04:00
kennethreitz 2e94212886 chunked encoding
Signed-off-by: Kenneth Reitz <me@kennethreitz.org>
2017-08-04 19:41:05 -04:00
kennethreitz 6f6b824745 Merge pull request #366 from MarekR22/DigestStaleScenerio
Digest authentication and expiried nonce - stale=true scenerio
2017-08-04 19:33:29 -04:00
kennethreitz 2f41299565 Merge pull request #368 from OndrejIT/docker
Update dockerfile
2017-07-27 16:13:14 -04:00
kennethreitz 780ad83a81 Merge pull request #369 from macheins/extend-anything
Allow all methods on /anything
2017-07-27 16:12:32 -04:00
macheins 6274e0999f Allow all methods on /anything 2017-07-19 13:57:17 +02:00
Ondřej Bárta 650f829b2c Update dockerfile 2017-07-18 20:02:06 +02:00
Ian Stapleton Cordasco 5b3a5380dd Merge pull request #367 from fanofxiaofeng/patch-1
each 'id' should only appear once
2017-07-14 06:01:44 -05:00
靳阳 fdda7bc714 each 'id' attribute should only appear once
h2 tag in line 5 and line 11 both have id 'ENDPOINTS', I suppose the h2 tag in line 5 has a wrong id.
2017-07-14 12:59:20 +08:00
Marek Ruszczak 84edf61ad6 Split and strip qop. 2017-07-09 19:26:01 +02:00
Marek Ruszczak 477721960c Add test for wrong password and expired (reused) nonce value 2017-07-08 11:27:26 +02:00
Marek Ruszczak 7e8015237d Add test to verify „stale after” scenario 2017-07-08 10:59:21 +02:00
Marek Ruszczak 0c968cbd35 Refactor digest_auth test to be able add missing test cases in next commits 2017-07-06 23:24:44 +02:00
Marek Ruszczak 8f93e11699 Improve when stale is reported
- when authentication fails cookie „last_nonce” is set, this cookie is used to check that next
  authentication is not used for next authentication attempt. If it is challenge response is send
  with stale=true flag.
2017-07-06 08:14:03 +02:00