97f7116624
allow session_id to be undefined when starting kernel channels
11 years ago
1b5874ac65
Merge pull request #6629 from minrk/wscookie
...
remove on_first_message authentication
11 years ago
76a54f0a82
Have /api return the IPython version
...
return version as a string, to be consistent with other APIs.
closes #6647
11 years ago
624f0071a2
remove on_first_message authentication
...
in ZMQStreams. No need for weird, special first message.
- use regular cookie auth
- use url param for session id
11 years ago
4bc339bd95
better log messages when rejecting cross-origin requests
12 years ago
d06e337881
only compare host:port in Websocket.check_origin
...
don't include protocol
- matches tornado's own behavior
- avoids incorrect 403 in http-behind-https proxy situations.
12 years ago
be80e62340
Check time of last ping before timing out a missing pong.
12 years ago
7e681c1c53
Merge pull request #6302 from minrk/ws-heartbeat-timeout
...
close websocket connections on ping/pong timeout
12 years ago
568034c349
use write_error instead of get_error_html
...
get_error_html is removed in tornado 4.0
12 years ago
b3b168648a
close websocket connections on ping/pong timeout
...
we recently added ws pings for keep alive,
and we can now use the longs to close dead connections.
This can apparently happen when connections are not closed cleanly,
e.g. on VPNs.
Setting ws_ping_timeout = 0 disables the ping mechanism altogether.
12 years ago
fae77bd133
remove unused project_dir
12 years ago
d4fe081fe5
move `/files/` redirect to base handlers
...
and reuse it in /nbconvert/html/…
closes #6137
12 years ago
0c0eb43719
teach contents service about non-notebook files
12 years ago
6cce477e07
rename notebooks service to contents service
...
minimal functional changes, committing because tests are passing.
12 years ago
a5b145e5a2
Merge pull request #6139 from minrk/wsping
...
send ping every 30 seconds to keep websockets alive
12 years ago
52840fcbf8
send ping every 30 seconds to keep websockets alive
12 years ago
579f5101f0
restore websocket_url configurable
...
allows ws to be handled via separate proxies,
as appears to be the case on OpenShift and some other hosting services.
12 years ago
88e52b2746
Only allow iframe embedding on same origin.
12 years ago
1edc97e34a
s/cors_/allow_/
...
add notes about Tornado 4, and comments, updates per review
12 years ago
acf0da01d9
make CORS configurable
...
allows setting CORS headers.
- cors_origin sets Access-Control-Allow-Origin directly
- cors_origin_pat allows setting Access-Control-Allow-Origin via regular expression, since the header spec itself doesn’t support complex access[1]
- cors_credentials sets Access-Control-Allow-Credentials: true
To allow CORS from everywhere:
ipython notebook —NotebookApp.cors_origin='*'
12 years ago
de0a7d7850
use utils.log.get_logger where appropriate
12 years ago
3b92c7c24f
Merge pull request #6011 from minrk/no-jsonapi
...
only use zmq.jsonapi when talking to zmq sockets
12 years ago
99f52dee68
Merge pull request #5827 from takluyver/kernelspec-rest-api
...
Kernel specs REST API
12 years ago
44d2a5b62a
only use zmq.jsonapi when talking to zmq sockets
...
use stdlib json otherwise
12 years ago
f937045395
Set kernel_id before checking websocket
...
If websocket attempt fails and cross origin attempt is detected, a HTTPError(404) error is raised. However, in the process of closing connections because of this 404 error, an unhandled Attribute exception (kernel_id not an attribute) is raised. Setting the kernel_id first avoids this.
12 years ago
b06f382e9b
interrogate kernel_info to get protocol version for adaptation
12 years ago
02fa348c69
Create REST API for kernel specs
12 years ago
f824aee955
log error message when API requests fail
12 years ago
d6f2dfefea
log refusal to serve hidden files dirs
12 years ago
a01c112b0f
allow custom headers on all pages
12 years ago
37cb0fbdee
remove websocket url
...
websockets should follow the kernel URL
(normal behavior is unchanged, only unused configurability is removed)
12 years ago
a184724bdb
remove base_kernel_url
12 years ago
e1e0b19a6a
s/base_project_url/base_url/
...
deprecate NotebookApp.base_project_url
12 years ago
eb9e0be218
Small refactoring of is_hidden to take root as default kwarg.
12 years ago
0c794b5d2c
404 for hidden files to not revleal their existence.
12 years ago
243392d810
Creating and testing IPython.html.utils.is_hidden.
12 years ago
ddc9340a6a
Handle variations of name for origin
12 years ago
e06f501cd6
s/==/is/
12 years ago
7efc751d0e
Name change to same_origin
12 years ago
60ab030e52
Verify that headers are set, explicitly
12 years ago
b12f002b35
Performing check only on open.
12 years ago
345de4e674
Use *args, **kwargs, log.warn
12 years ago
104275ab73
Indicate Py3 vs. Py2 codepath.
12 years ago
5800b1c625
Get rid of exc_info as there isn't an exception.
12 years ago
7b552d862d
Add Origin Checking.
12 years ago
063bfa9688
we don't bundle lessc anymore, remove its vestiges
12 years ago
c0f346c4e3
Merge pull request #4735 from minrk/better-errors
...
add some HTML error pages
12 years ago
b7563aec7c
be more specific about unknown status codes
...
per review
12 years ago
9865c4f02f
whitelist alphanumeric characters for cookie_name
...
should fix #4761
12 years ago
96c1af0ce4
Merge pull request #4715 from minrk/tornado-static-url
...
restore use of tornado static_url in templates
12 years ago
MinRK
Bussonnier Matthias
Richard Everson
Thomas Kluyver
rgbkrk
Steven Anton
Paul Ivanov
Brian E. Granger
Kyle Kelley