Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add authorization layer to server request handlers #165

Merged
merged 13 commits into from
Feb 9, 2022

Commits on Jan 14, 2022

  1. add authorization layer to request handlers

    Zsailer authored and minrk committed Jan 14, 2022
    Configuration menu
    Copy the full SHA
    e543c17 View commit details
    Browse the repository at this point in the history
  2. update authorized wrapper with resource

    Zsailer authored and minrk committed Jan 14, 2022
    Configuration menu
    Copy the full SHA
    debc397 View commit details
    Browse the repository at this point in the history
  3. Add tests

    davidbrochart authored and minrk committed Jan 14, 2022
    Configuration menu
    Copy the full SHA
    23391ab View commit details
    Browse the repository at this point in the history
  4. Add documentation

    davidbrochart authored and minrk committed Jan 14, 2022
    Configuration menu
    Copy the full SHA
    b405e99 View commit details
    Browse the repository at this point in the history
  5. Add AuthorizationManager class

    Zsailer authored and minrk committed Jan 14, 2022
    Configuration menu
    Copy the full SHA
    b16f3aa View commit details
    Browse the repository at this point in the history
  6. Update examples/authorization/README.md

    blink1073 authored and minrk committed Jan 14, 2022
    Configuration menu
    Copy the full SHA
    350e46d View commit details
    Browse the repository at this point in the history
  7. authorization: address review

    - "contents" applies to /view
    - "terminals" is plural
    - "server" is scope for shutdown
    - failed authorization is 403, not 401
    - calling it Authorizer instead of AuthorizationManager
    - 'user' term is more broadly understood than 'subject'.
      Plus, it always comes from `self.current_user`.
    - default authorizer that allows all users is AllowAllAuthorizer
    minrk committed Jan 14, 2022
    Configuration menu
    Copy the full SHA
    9f9ad53 View commit details
    Browse the repository at this point in the history
  8. allow @authorized to be used with no arguments

    - use auth_resource on handler
    - use http method name for action
    minrk committed Jan 14, 2022
    Configuration menu
    Copy the full SHA
    67ec84e View commit details
    Browse the repository at this point in the history
  9. Configuration menu
    Copy the full SHA
    4a693d6 View commit details
    Browse the repository at this point in the history

Commits on Jan 20, 2022

  1. Configuration menu
    Copy the full SHA
    4a7da00 View commit details
    Browse the repository at this point in the history

Commits on Jan 31, 2022

  1. Configuration menu
    Copy the full SHA
    b0461c7 View commit details
    Browse the repository at this point in the history

Commits on Feb 1, 2022

  1. Move Authorizer to existing jupyter_server.auth

    since it's a public API packages should import,
    let's not nest it deep in services.auth.authorizer
    minrk committed Feb 1, 2022
    Configuration menu
    Copy the full SHA
    e132169 View commit details
    Browse the repository at this point in the history

Commits on Feb 9, 2022

  1. Configuration menu
    Copy the full SHA
    82a9873 View commit details
    Browse the repository at this point in the history