Commit graph

337 commits

Author SHA1 Message Date
William Boman
250c4d5388 add 2 new setting variables for more granular failure limit control (#113) 2018-04-10 09:22:51 -04:00
William Boman
b546224372 send signals when blocking username or ip (#114) 2018-04-10 09:21:37 -04:00
Ken Cochrane
50e2962fd5 Released 0.5.3
Signed-off-by: Ken Cochrane <KenCochrane@gmail.com>
2018-03-11 16:26:58 -04:00
Ken Cochrane
fcfcd53076
Move mockredis to test requirements. replaces #115 (#119)
Signed-off-by: Ken Cochrane <KenCochrane@gmail.com>
2018-02-20 09:34:14 -05:00
Ken Cochrane
104eda3d03 Added 0.5.2 release details to README.md
Signed-off-by: Ken Cochrane <KenCochrane@gmail.com>
2018-02-19 10:07:14 -05:00
Ken Cochrane
46ff44bd87 Released version 0.5.2
Signed-off-by: Ken Cochrane <KenCochrane@gmail.com>
2018-02-19 09:50:59 -05:00
Daniel Hahler
dff964c226 README: align reverse-proxy settings (#118)
[ci skip]
2018-02-19 09:16:39 -05:00
Cobus Carstens
5aa69bac96 Only use the username if it is actually provided (#112)
* Only use the username if it is actually provided

* Test that unspecified usernames cannot be blocked

* Added test to prevent Coveralls from complaining about a coverage regression.
2018-02-01 06:30:26 -05:00
William Boman
2b6374f1da utils: add username kwarg for providing username directly rather than via callback arg (#107) 2018-02-01 06:27:38 -05:00
Sophie Wirth
cde53c5315 replace django.core.urlresolvers with django.urls to appeace Django2.… (#106)
* replace django.core.urlresolvers with django.urls to appeace Django2.0 deprecations
* add try except block around imports for older version support
* add correct django version in setup.py install_reqs
2017-12-11 13:52:50 -05:00
cburger
b2490e4e4c Correctly get raw client when using django_redis cache. (#104) 2017-10-27 09:38:11 -04:00
Eric Buckley
cd587a4f09 removing hiredis dependency in setup.py (#102) 2017-08-31 13:44:09 -04:00
Ken Cochrane
bcfe46ceca change django install_requires version (#101)
Fix the django install)requires version in setup.py so that it allows versions of django 1.11.x
2017-08-31 11:31:04 -04:00
ruthus18
7c6a7d2b93 Update regex for 'unblock_username_view'. (#100)
The reason why we need to handle almost all special symbols is in cases when username is like 'some!username'

 Issue: #76
2017-08-31 11:12:14 -04:00
Ken Cochrane
5451dba099 Bump to 0.5.1 (#95)
Signed-off-by: Ken Cochrane <kencochrane@gmail.com>
2017-08-02 14:50:59 -04:00
Teemu N
db7a9001db Middleware fix for django >= 1.10 (#93)
Fixes the `TypeError: object.__init__() takes no parameters` that happens with the new MIDDLEWARE that is new in django 1.10
2017-07-04 13:23:28 -04:00
Mattia Procopio
85817fd278 Force the username to lowercase (#90) 2017-07-01 09:24:51 -04:00
Ken Cochrane
fc9d51e46a Release 0.5.0 (#88)
Signed-off-by: Ken Cochrane <kencochrane@gmail.com>
2017-06-29 09:27:04 -04:00
Ken Cochrane
4d9adc35c2 Cleanup the code to remove lint warnings (#87)
* Cleanup the code to remove lint warnings

Signed-off-by: Ken Cochrane <kencochrane@gmail.com>

* Fixed typo

Signed-off-by: Ken Cochrane <kencochrane@gmail.com>
2017-06-28 17:09:44 -04:00
Mattia Procopio
b985d17beb Allow decoration of functions beyond the admin login (#86)
* Allow decoration of functions beyond the admin login

* Exclude tests file from coverage

* Allow installing django 1.11

* Add python 3.6 for testing
2017-06-26 12:23:23 -04:00
Francisco Rivera
d2b712eade Taking redis client from django.core.cache (#82)
* new setting that point to an already configured redis client

* taking redis client from django cache setting

* adding informative exception

* dropping django 1.6 support

* dropping django 1.7 support

* adding tests

* removing old coverage stuff + pep8 fixes

* ups, wrong package

* supporting multiple backends

* adding documentation

* dropping python 2.6 support
2017-06-24 19:17:15 -04:00
Israel Saeta Pérez
a59cbca0f6 Add support for Django 1.11 (#79) 2017-06-12 19:10:03 -04:00
Israel Saeta Pérez
11ee7bc233 Doc: BasicAuthenticationDefender should precede other auth classes (#80) 2017-06-12 11:53:12 -04:00
Israel Saeta Pérez
69db1cfb70 Allow usernames with plus signs in unblock view (#77)
This fixes bug #GH76 where an exception like

```
Reverse for 'defender_unblock_username_view' with arguments '(u'user+test@domain.tld',)' and keyword arguments '{}' not found. 1 pattern(s) tried: [u'admin/defender/blocks/username/(?P[A-Za-z0-9-._@]+)/unblock$']
```

was raised when trying to access the `/admin/defender/blocks/` URL when a user with a plus sign had been locked out.
2017-06-10 10:39:19 -04:00
Ken Cochrane
c4f3a61036 Bump for 0.4.3 release (#74)
* Bump for 0.4.3 release

Signed-off-by: Ken Cochrane <KenCochrane@gmail.com>

* updated travis dependencies and fixed issue with 1.10,1.11 tests

Signed-off-by: Ken Cochrane <KenCochrane@gmail.com>

* Added travis settings

Signed-off-by: Ken Cochrane <KenCochrane@gmail.com>

* Revert django 1.11 support

Signed-off-by: Ken Cochrane <KenCochrane@gmail.com>
2017-04-14 18:30:58 -04:00
Jakub Kuszneruk
079c897203 Example djangorestframework auth method
- sample authentication method described in README
piggyback:
- typo in lockout.html
2017-03-21 11:03:42 -04:00
Ken Cochrane
46ea25c8f0 Merge pull request #71 from shnela/custom_get_user_from_request
[#70] get username from request is more flexible
2017-03-10 14:38:58 -05:00
Jakub Kuszneruk
cd0a22c1c5 [#70] get username from request is more flexible
- Every function which loads username from request has the optional paramter: get_username
piggyback:
- removed redefinition of USERNAME_FORM_FIELD from defender.config
2017-03-10 20:04:45 +01:00
Ken Cochrane
7a2961a12a Merge pull request #68 from uploadcare/improve-travis
Update .travis.yml
2017-01-31 08:58:48 -05:00
Ken Cochrane
fa3f6a3a62 Merge pull request #67 from uploadcare/master
flex version requirements for dependencies
2017-01-31 08:57:44 -05:00
Dmitry Mukhin
89963c9f02 don't use celery 4 yet 2017-01-31 16:38:55 +03:00
Dmitry Mukhin
e3a4b00d44 add test on python 3.6, always test agains latest django patch 2017-01-31 16:38:55 +03:00
Dmitry Mukhin
6a0ef3024b flex version requirements for dependencies 2017-01-31 16:11:29 +03:00
Ken Cochrane
08d49e02fa Merge pull request #64 from Mobeye/master
Add Django 1.10 to install_requires
2016-08-31 10:55:13 -04:00
Benjamin Toueg
f40c9ff5c5 Add for Django 1.10 to install_requires 2016-08-31 16:08:45 +02:00
Ken Cochrane
719ccc6dca updated Django supported versions in README
updated README to show support for Django 1.8.x, and 1.9.x
2016-07-21 18:16:09 -04:00
Ken Cochrane
d18e535b4b Merge pull request #61 from 0x836/add_disable_username_block_feature
Add disable username block feature
2016-06-27 09:23:22 -04:00
Karimov Dmitriy
32f60c3f8b Add test_disable_username_lockout 2016-06-20 13:36:02 +05:00
Karimov Dmitriy
d85752970b Add DEFENDER_DISABLE_USERNAME_LOCKOUT 2016-06-20 09:20:47 +05:00
Ken Cochrane
f5b40a1820 Merge pull request #56 from kencochrane/remove_admin_filter
removing the django admin filter for username
2016-05-27 14:13:02 -04:00
Ken Cochrane
57a069bc61 Merge pull request #58 from mrbaboon/patch-1
Fix DataError on login
2016-05-27 14:12:32 -04:00
Ken Cochrane
1a105a6604 Merge pull request #59 from btoueg/patch-1
Fix for usernames with capital letters
2016-05-27 14:12:16 -04:00
Ken Cochrane
9692dce612 Merge pull request #57 from ericbuckley/_removing_urls_patterns_func
making urlpatterns a plain list
2016-05-27 14:12:02 -04:00
Benjamin Toueg
7fc366e4ca Fix for usernames with capital letters 2016-05-13 16:37:22 +02:00
Alex White
9209f0579f Fix DataError on login
A watched login failure causes a 500 saving a 256 character long username into the login attempts.  Conditionally slice it to fit AccessAttempt
2016-05-11 14:07:50 -07:00
Eric Buckley
2913b5f38b making urlpatterns a plain list
as of Django 1.8, creating urlpatterns with the
`django.conf.urls.patterns` function became deprecated and will be
removed in 1.10.

https://docs.djangoproject.com/en/1.8/ref/urls/#patterns
2016-04-19 21:09:26 -07:00
Ken Cochrane
9cef057520 removing the django admin filter for username 2016-02-09 12:11:06 -05:00
Ken Cochrane
972c670879 bump version to 0.4.2 and django version to 1.9.2 and 1.8.9 2016-02-01 14:53:38 -05:00
Ken Cochrane
f3702973de Merge pull request #55 from vovanbo/django-1.9-support
Django 1.9 support
2016-02-01 14:49:56 -05:00
Vladimir Bolshakov
16e4e4d9c6 Exclude Python 3.3 and Django 1.9 from Travis matrix, because of Django 1.8 is the last version with Python 3.3 support.
https://docs.djangoproject.com/en/1.9/releases/1.9/#python-compatibility
2016-02-01 19:42:14 +03:00