~helmut/wsgitools.git - See http://subdivi.de/~helmut/wsgitools/

Age	Commit message (Collapse)	Author
2011-07-24	removed execute bit from wsgitools/digest.py	Helmut Grohne
	It probably gained this bit later than shown in history due to darcs not tracking execute bits. The bit was probably added for doc tests which moved to a designated file later.
2011-07-22	BasicAuthMiddleware docstring: mention REMOTE_USER	Helmut Grohne

2011-07-18	adapt exc_info handling for python 3	Helmut Grohne

2011-06-08	more testcases	Helmut Grohne

2011-06-08	added test cases for BasicAuthMiddleware	Helmut Grohne

2011-06-02	test.py: exit non-zero on failure	Helmut Grohne
	The exit status is now the number of failures.
2011-06-01	reworked digest.AuthTokenGenerator	Helmut Grohne
	AuthTokenGenerator gained a base class AbstractTokenGenerator. This class provides an additional method check_password implementing the interface required by BasicAuthMiddleware. In addition AbstractTokenGenerator gained two subclasses HtdigestTokenGenerator and UpdatingHtdigestTokenGenerator. They both read authentication information from a apache htdigest file. The latter also checks the file for updates.
2011-06-01	improved doc string for middlewares.ContentLengthMiddleware	Helmut Grohne

2011-06-01	added test case for middlewares.ContentLengthMiddleware	Helmut Grohne

2011-06-01	added a test case for applications.StaticFile	Helmut Grohne

2011-06-01	test.py: improved header check	Helmut Grohne
	It previously only checked for the validity of a header and now also checks for the presence of a header.
2011-06-01	README: installation and test suite instructions	Helmut Grohne

2011-06-01	include epydoc.conf in MANIFEST.in	Helmut Grohne

2011-01-12	DictAuthChecker.__call__ should take an environwsgitools-0.2.2	Helmut Grohne
	as this is tried by BasicAuthMiddleware first.
2011-01-12	improved AuthDigestMiddleware doc string	Helmut Grohne

2011-01-12	scgi.asynchronous catches more errors now	Helmut Grohne
	This addresses a disputed denial of service condition described in http://bugs.python.org/issue6706. Note that wsgitools is not hit as hard as pyftplib.
2011-01-12	explicitly target python 2.x in setup.py	Helmut Grohne

2011-01-12	bug fix for StaticContent and CachingMiddleware	Helmut Grohne
	PEP333 says that the headers list passed to start_response may be modified by servers or middlewares. In fact this happens in DigestAuthMiddleware. The StaticContent and CachingMiddleware classes did not take this into account and returned the same headers list multiple times which is wrong and can lead to denial of service.
2010-09-04	added note about ContentLengthMiddleware's wsgi conformance	Helmut Grohne

2010-09-04	CachingMiddleware: automatic cache pruning implemented	Helmut Grohne

2010-09-04	middlewares.CachingMiddleware: include request method in key	Helmut Grohne

2010-09-02	employ wsgiref.validate.validator in the test suite	Helmut Grohne

2010-09-02	improved digest documentation	Helmut Grohne

2010-08-31	bugfix: io module from py2.6 provides incompatible StringIO	Helmut Grohne

2010-06-04	flush log file in RequestLogWSGIFilter by default	Helmut Grohne

2010-05-29	release 0.2.1 for security fixwsgitools-0.2.1	Helmut Grohne

2010-05-29	security fix: filters.RequestLogWSGIFilter must escape strings	Helmut Grohne

2010-05-25	bugfix: endless loop for closed connection in scgi.forkpool	Helmut Grohne

2010-01-31	fix shared default argument to parse_digest_response	Helmut Grohne

2009-10-25	observed SocketFileWrapper bug fixed	Helmut Grohne

2009-10-25	more SocketFileWrapper (forkpool) bugs	Helmut Grohne

2009-10-25	SocketFileWrapper from forkpool contained more bugs	Helmut Grohne

2009-10-25	socket.socket.recv requires a parameter	Helmut Grohne

2009-10-25	extended application.StaticContent	Helmut Grohne
	It gained the capability to server content to unknown methods. For a backwards-compatible API this has to be enabled by an optional boolean.
2009-08-25	added enable_sighandler for scgi.forkpool	Helmut Grohne

2009-07-04	change version to 0.2wsgitools-0.2	Helmut Grohne

2009-07-04	declared beta state in setup.py	Helmut Grohne

2009-07-04	added testsuite	Helmut Grohne

2009-07-04	two new digest doctests	Helmut Grohne

2009-07-04	more docstring/epydoc improvements	Helmut Grohne

2009-06-26	extended README by supported python versions	Helmut Grohne

2009-06-24	fixed an epydoc comment in digest	Helmut Grohne

2009-06-24	added doctest for DBAPI2NonceStore	Helmut Grohne

2009-06-24	added dbapi2 (sql) backed noncestore! yeah :-)	Helmut Grohne

2009-06-24	except ImportError in filters on imports	Helmut Grohne

2009-06-24	documented potential overflow in digest	Helmut Grohne

2009-06-24	auth_response should not return ValueError in digest	Helmut Grohne

2009-06-24	fixed RequestLogMiddleware to work at all	Helmut Grohne

2009-06-23	made RequestLogWSGIFilter define attrs in __init__	Helmut Grohne

2009-03-29	improve digest module (killed isnonce method)	Helmut Grohne
	Prior to this change the digest module would check whether a nonce looks like a nonce, verify the response and then verify the nonce. This left a bit more room for brute forcing passwords, as the same nonce could be used in arbitrary many tries and a stale response would indicate an authentication success. Now authentication is only tried for valid nonces. This also makes the NonceStoreBase.isnonce method superfluous.