28 Commits (081dcd577461112ab06e8e82a430ed8f66f95fca)

Author	SHA1	Message	Date
Matthias Bussonnier	eca4c71056	Extra self	8 years ago
Matthias Bussonnier	a8971410c1	Add option disabled changing password at login. ... Document the changing of password.	8 years ago
Matthias Bussonnier	709fdd637a	When login-in via token, let a chance for user to set the password ... When token is enabled, the login page will present a form to the user asking them if they want to set a password at the same time. This is almost equivalent to running `jupyter notebook password` on the command line. The experience can likely be better, but just submitting that as a POC for feedback	8 years ago
Min RK	fea2ef258f	set cookie on base_url ... avoids clobbering cookies when multiple notebook servers are run on one host. Users can override `cookie_options.path = ‘/‘` if they *want* cookies to be shared across notebooks on one host.	8 years ago
Min RK	68a514a29d	Merge pull request #2033 from vlimant/master ... simple overload of passwd_check	9 years ago
Kyle Kelley	f5f97d1f93	Merge pull request #2007 from minrk/password ... add `jupyter notebook password` entrypoint	9 years ago
jean-roch	6ab3a5c098	correcting function definition	9 years ago
vlimant	ab019aae74	allows to overload the method to check unix-type password using crypt	9 years ago
Min RK	53f809d407	use a warning for failure to set file permissions ... instead of print	9 years ago
Min RK	cd7e0a939c	add `jupyter notebook password` entrypoint ... records, hashes, and stores password in json config	9 years ago
Min RK	86c6268f64	prose review	9 years ago
Min RK	70e79a0ad6	add token_authenticated property ... indicates if a token is used for authentication, in which case xsrf checks should be skipped.	9 years ago
Srinivas Reddy Thatiparthy	161c174a98	rename log.warn to log.warning as log.warn is deprecated	9 years ago
Min RK	1e070a50f5	don't check origin on token-authenticated requests ... adds LoginHandler.should_check_origin classmethod API	9 years ago
Min RK	5d5d063746	Look for token in Authorization header ... matches JupyterHub, Kernel Gateway	9 years ago
Min RK	bf249669e1	call it token ... login_token is redundant	9 years ago
Min RK	5a6d7556af	allow entering login token at password prompt	9 years ago
Min RK	cd3c6c1b8a	use one-time token for opening browser ... first connection consumes the token, so command-line snoops can’t re-use it.	9 years ago
Min RK	3ba68d8cb7	enable token-authentication by default ... - add NotebookApp.login_token, used when NotebookApp.password is not set - store login_token, bool(password) in notebook server-info file - `jupyter notebook list` shows pasteable URLs with token General changes: - notebook servers are now authenticated by default - first connect with token sets a cookie - once a user has logged into one server with a token, their browser is logged in to all subsequent servers on the same system+port until cookie_secret changes	9 years ago
Min RK	6c5cca1328	Make login_available method LoginHandler.get_login_available ... There was a conflict for the .login_available property on LoginHandler itself causing the login form to render incorrectly when login_available should be False	9 years ago
Min RK	37349b9953	include cross-origin check when allowing login URL redirects	10 years ago
Min RK	07c4d23cad	make cookies httponly by default ... we don't need or want cookie access in js	10 years ago
Min RK	417b17450e	Add `cookie_options` to make cookie args configurable	10 years ago
Maarten A. Breddels	5a3272f771	fixed a typo, and corrected the help text	10 years ago
Maarten A. Breddels	b9d106a808	implemented changes as discussed at PR 775, password generation moved to module	10 years ago
Chris Seymour	6880715826	Use a 401 status code for invalid login attempts. Fixes #384	11 years ago
Min RK	acbe5cc442	restrict login redirect to notebook app ... prevents redirect to other websites from login page	11 years ago
Min RK	d71a59cc9f	s/jupyter_notebook/notebook	11 years ago