Commit graph

168 commits

Author SHA1 Message Date
Mattia Procopio
b985d17beb Allow decoration of functions beyond the admin login (#86)
* Allow decoration of functions beyond the admin login

* Exclude tests file from coverage

* Allow installing django 1.11

* Add python 3.6 for testing
2017-06-26 12:23:23 -04:00
Francisco Rivera
d2b712eade Taking redis client from django.core.cache (#82)
* new setting that point to an already configured redis client

* taking redis client from django cache setting

* adding informative exception

* dropping django 1.6 support

* dropping django 1.7 support

* adding tests

* removing old coverage stuff + pep8 fixes

* ups, wrong package

* supporting multiple backends

* adding documentation

* dropping python 2.6 support
2017-06-24 19:17:15 -04:00
Israel Saeta Pérez
a59cbca0f6 Add support for Django 1.11 (#79) 2017-06-12 19:10:03 -04:00
Israel Saeta Pérez
11ee7bc233 Doc: BasicAuthenticationDefender should precede other auth classes (#80) 2017-06-12 11:53:12 -04:00
Israel Saeta Pérez
69db1cfb70 Allow usernames with plus signs in unblock view (#77)
This fixes bug #GH76 where an exception like

```
Reverse for 'defender_unblock_username_view' with arguments '(u'user+test@domain.tld',)' and keyword arguments '{}' not found. 1 pattern(s) tried: [u'admin/defender/blocks/username/(?P[A-Za-z0-9-._@]+)/unblock$']
```

was raised when trying to access the `/admin/defender/blocks/` URL when a user with a plus sign had been locked out.
2017-06-10 10:39:19 -04:00
Ken Cochrane
c4f3a61036 Bump for 0.4.3 release (#74)
* Bump for 0.4.3 release

Signed-off-by: Ken Cochrane <KenCochrane@gmail.com>

* updated travis dependencies and fixed issue with 1.10,1.11 tests

Signed-off-by: Ken Cochrane <KenCochrane@gmail.com>

* Added travis settings

Signed-off-by: Ken Cochrane <KenCochrane@gmail.com>

* Revert django 1.11 support

Signed-off-by: Ken Cochrane <KenCochrane@gmail.com>
2017-04-14 18:30:58 -04:00
Jakub Kuszneruk
079c897203 Example djangorestframework auth method
- sample authentication method described in README
piggyback:
- typo in lockout.html
2017-03-21 11:03:42 -04:00
Ken Cochrane
46ea25c8f0 Merge pull request #71 from shnela/custom_get_user_from_request
[#70] get username from request is more flexible
2017-03-10 14:38:58 -05:00
Jakub Kuszneruk
cd0a22c1c5 [#70] get username from request is more flexible
- Every function which loads username from request has the optional paramter: get_username
piggyback:
- removed redefinition of USERNAME_FORM_FIELD from defender.config
2017-03-10 20:04:45 +01:00
Ken Cochrane
7a2961a12a Merge pull request #68 from uploadcare/improve-travis
Update .travis.yml
2017-01-31 08:58:48 -05:00
Ken Cochrane
fa3f6a3a62 Merge pull request #67 from uploadcare/master
flex version requirements for dependencies
2017-01-31 08:57:44 -05:00
Dmitry Mukhin
89963c9f02 don't use celery 4 yet 2017-01-31 16:38:55 +03:00
Dmitry Mukhin
e3a4b00d44 add test on python 3.6, always test agains latest django patch 2017-01-31 16:38:55 +03:00
Dmitry Mukhin
6a0ef3024b flex version requirements for dependencies 2017-01-31 16:11:29 +03:00
Ken Cochrane
08d49e02fa Merge pull request #64 from Mobeye/master
Add Django 1.10 to install_requires
2016-08-31 10:55:13 -04:00
Benjamin Toueg
f40c9ff5c5 Add for Django 1.10 to install_requires 2016-08-31 16:08:45 +02:00
Ken Cochrane
719ccc6dca updated Django supported versions in README
updated README to show support for Django 1.8.x, and 1.9.x
2016-07-21 18:16:09 -04:00
Ken Cochrane
d18e535b4b Merge pull request #61 from 0x836/add_disable_username_block_feature
Add disable username block feature
2016-06-27 09:23:22 -04:00
Karimov Dmitriy
32f60c3f8b Add test_disable_username_lockout 2016-06-20 13:36:02 +05:00
Karimov Dmitriy
d85752970b Add DEFENDER_DISABLE_USERNAME_LOCKOUT 2016-06-20 09:20:47 +05:00
Ken Cochrane
f5b40a1820 Merge pull request #56 from kencochrane/remove_admin_filter
removing the django admin filter for username
2016-05-27 14:13:02 -04:00
Ken Cochrane
57a069bc61 Merge pull request #58 from mrbaboon/patch-1
Fix DataError on login
2016-05-27 14:12:32 -04:00
Ken Cochrane
1a105a6604 Merge pull request #59 from btoueg/patch-1
Fix for usernames with capital letters
2016-05-27 14:12:16 -04:00
Ken Cochrane
9692dce612 Merge pull request #57 from ericbuckley/_removing_urls_patterns_func
making urlpatterns a plain list
2016-05-27 14:12:02 -04:00
Benjamin Toueg
7fc366e4ca Fix for usernames with capital letters 2016-05-13 16:37:22 +02:00
Alex White
9209f0579f Fix DataError on login
A watched login failure causes a 500 saving a 256 character long username into the login attempts.  Conditionally slice it to fit AccessAttempt
2016-05-11 14:07:50 -07:00
Eric Buckley
2913b5f38b making urlpatterns a plain list
as of Django 1.8, creating urlpatterns with the
`django.conf.urls.patterns` function became deprecated and will be
removed in 1.10.

https://docs.djangoproject.com/en/1.8/ref/urls/#patterns
2016-04-19 21:09:26 -07:00
Ken Cochrane
9cef057520 removing the django admin filter for username 2016-02-09 12:11:06 -05:00
Ken Cochrane
972c670879 bump version to 0.4.2 and django version to 1.9.2 and 1.8.9 2016-02-01 14:53:38 -05:00
Ken Cochrane
f3702973de Merge pull request #55 from vovanbo/django-1.9-support
Django 1.9 support
2016-02-01 14:49:56 -05:00
Vladimir Bolshakov
16e4e4d9c6 Exclude Python 3.3 and Django 1.9 from Travis matrix, because of Django 1.8 is the last version with Python 3.3 support.
https://docs.djangoproject.com/en/1.9/releases/1.9/#python-compatibility
2016-02-01 19:42:14 +03:00
Vladimir Bolshakov
4b8852204d Django 1.9 is supported in installation requirements. 2016-02-01 19:10:28 +03:00
Vladimir Bolshakov
2ce4e16979 Use url method instead of patterns in test URLs setup. 2016-02-01 19:09:59 +03:00
Vladimir Bolshakov
23a690395c Use render shortcut instead of render_to_response. 2016-02-01 19:09:28 +03:00
Vladimir Bolshakov
c3495605ea Fix testing of failed login redirect to URL for Django 1.9.
Location header in redirect can be relative URL from Django 1.9.
2016-02-01 19:08:54 +03:00
Vladimir Bolshakov
948877c156 Fix formatting. 2016-02-01 19:07:16 +03:00
Vladimir Bolshakov
f4e0ddc032 assertEquals -> assertEqual 2016-02-01 19:06:38 +03:00
Vladimir Bolshakov
44c8746d8c Templates settings as recommended from Django 1.8 2016-02-01 19:05:17 +03:00
Ken Cochrane
57ce00c4af Merge pull request #54 from kencochrane/version_0.4.1
bump version to 0.4.1
2016-01-25 15:05:34 -05:00
Ken Cochrane
6a20dbf671 bump version to 0.4.1 2016-01-25 15:02:15 -05:00
Ken Cochrane
8c2d492131 Merge pull request #53 from kencochrane/update_travis_settings
updated travisCI settings
2016-01-25 14:59:38 -05:00
Ken Cochrane
cdb39f2413 updated travisCI settings 2016-01-25 13:59:14 -05:00
Ken Cochrane
adc429ab50 Merge pull request #52 from docker-hub/bc
Add helpers that do not assume how to retrieve `username`
2016-01-25 13:54:54 -05:00
bc Wong
831bb299f9 Always define the task to store login attempt
Adding function definitions based on config values makes testing hard.
The task function is always there, and we choose to call it depending on
config during runtime.
2016-01-24 17:28:20 -08:00
bc Wong
f9047162d4 Add helpers that do not assume how to retrieve username
The `is_already_locked` method assumes how the username is stored in the
request. This patch adds helpers that don't to allow for more flexible
implementation.
2016-01-24 09:41:43 -08:00
Ken Cochrane
a03726ce5b Merge pull request #51 from kencochrane/add_ip_blocking_feature
Added  DEFENDER_DISABLE_IP_LOCKOUT so that you can disable IP lockouts if you want
2015-10-23 15:26:00 -04:00
Ken Cochrane
6b91730722 cleanup the boolean logic around is_already_locked() 2015-10-23 15:00:56 -04:00
Ken Cochrane
6e2ea2b94a fix compatibility issues with python 2.6, and disable testing on django versions 1.6.x and 1.7.x on python 3.5 2015-10-22 13:37:41 -04:00
Ken Cochrane
cc45409078 fixed pep8 issues 2015-10-21 16:44:12 -04:00
Ken Cochrane
64c5684c12 Added so that you can disable IP lockouts if you want 2015-10-21 16:33:08 -04:00