18 Commits (f3b4d16d14b03acf0daec00a33c0a49d919e1c03)

Author	SHA1	Message	Date
Min RK	86c6268f64	prose review	9 years ago
Min RK	70e79a0ad6	add token_authenticated property ... indicates if a token is used for authentication, in which case xsrf checks should be skipped.	9 years ago
Srinivas Reddy Thatiparthy	161c174a98	rename log.warn to log.warning as log.warn is deprecated	9 years ago
Min RK	1e070a50f5	don't check origin on token-authenticated requests ... adds LoginHandler.should_check_origin classmethod API	9 years ago
Min RK	5d5d063746	Look for token in Authorization header ... matches JupyterHub, Kernel Gateway	9 years ago
Min RK	bf249669e1	call it token ... login_token is redundant	9 years ago
Min RK	5a6d7556af	allow entering login token at password prompt	9 years ago
Min RK	cd3c6c1b8a	use one-time token for opening browser ... first connection consumes the token, so command-line snoops can’t re-use it.	9 years ago
Min RK	3ba68d8cb7	enable token-authentication by default ... - add NotebookApp.login_token, used when NotebookApp.password is not set - store login_token, bool(password) in notebook server-info file - `jupyter notebook list` shows pasteable URLs with token General changes: - notebook servers are now authenticated by default - first connect with token sets a cookie - once a user has logged into one server with a token, their browser is logged in to all subsequent servers on the same system+port until cookie_secret changes	9 years ago
Min RK	6c5cca1328	Make login_available method LoginHandler.get_login_available ... There was a conflict for the .login_available property on LoginHandler itself causing the login form to render incorrectly when login_available should be False	9 years ago
Min RK	37349b9953	include cross-origin check when allowing login URL redirects	10 years ago
Min RK	07c4d23cad	make cookies httponly by default ... we don't need or want cookie access in js	10 years ago
Min RK	417b17450e	Add `cookie_options` to make cookie args configurable	10 years ago
Maarten A. Breddels	5a3272f771	fixed a typo, and corrected the help text	10 years ago
Maarten A. Breddels	b9d106a808	implemented changes as discussed at PR 775, password generation moved to module	10 years ago
Chris Seymour	6880715826	Use a 401 status code for invalid login attempts. Fixes #384	11 years ago
Min RK	acbe5cc442	restrict login redirect to notebook app ... prevents redirect to other websites from login page	11 years ago
Min RK	d71a59cc9f	s/jupyter_notebook/notebook	11 years ago