Commit Graph

332 Commits

Author SHA1 Message Date
Aditya Bansal efe8545303 local-uploads: Start running authentication checks on file requests.
From here on we start to authenticate uploaded file request before
serving this files in production. This involves allowing NGINX to
pass on these file requests to Django for authentication and then
serve these files by making use on internal redirect requests having
x-accel-redirect field. The redirection on requests and loading
of x-accel-redirect param is handled by django-sendfile.

NOTE: This commit starts to authenticate these requests for Zulip
servers running platforms either Ubuntu Xenial (16.04) or above.

Fixes: #320 and #291 partially.
2018-02-16 05:06:37 +05:30
Vishnu Ks caaa7d1b82 requirements: Upgrade ndg-httpsclient to 0.4.4. 2018-02-14 09:44:26 -08:00
Vishnu Ks 18436c100a requirements: Upgrade google-api-python-client to 1.6.5. 2018-02-14 09:44:25 -08:00
Vishnu Ks f93f1972e9 requirements: Upgrade certifi to 2018.1.18. 2018-02-14 09:41:49 -08:00
Vishnu Ks 026d835d3a requirements: Upgrade twilio to two. 2018-02-14 09:41:49 -08:00
Vishnu Ks adac6c0cf2 requirements: Upgrade tornado to 4.5.3. 2018-02-14 09:41:49 -08:00
Vishnu Ks 9effe27eab requirements: Upgrade typing to 3.6.4. 2018-02-14 09:41:49 -08:00
Vishnu Ks 3f3f876187 requirements: Upgrade stripe to 1.77.2. 2018-02-14 09:41:49 -08:00
Vishnu Ks 48f93a7460 requirements: Upgrade pytz to 2018.3. 2018-02-14 09:41:49 -08:00
Vishnu Ks 0aa6f00cf2 requirements: Upgrade pyasn1 to pyasn1-modules. 2018-02-14 09:41:49 -08:00
Vishnu Ks f1098a77f2 requirements: Upgrade polib to 1.1.0. 2018-02-14 09:41:49 -08:00
Vishnu Ks 2b081f882a requirements: Upgrade Pillow to 5.0.0. 2018-02-14 09:41:49 -08:00
Vishnu Ks 0e2058ae48 requirements: Upgrade pika to 0.11.2. 2018-02-14 09:41:49 -08:00
Vishnu Ks 3780b8ce04 requirements: Upgrade Markdown to 2.6.11. 2018-02-14 09:41:49 -08:00
Vishnu Ks 6ca3f72e6e requirements: Upgrade lxml to 4.1.1. 2018-02-14 09:41:49 -08:00
Vishnu Ks 617549fec5 requirements: Upgrade Jinja2 to 2.10. 2018-02-14 09:41:49 -08:00
Vishnu Ks 51577b788a requirements: Upgrade html2text to 2018.1.9. 2018-02-14 09:41:49 -08:00
Vishnu Ks 449c1d5064 requirements: Upgrade django-two-factor-auth to 1.7.0. 2018-02-14 09:41:49 -08:00
Vishnu Ks 2b0099f696 requirements: Upgrade django-pipeline to 1.6.14. 2018-02-14 09:41:49 -08:00
Vishnu Ks 7a8b174a01 requirements: Upgrade cryptography to 2.1.4. 2018-02-14 09:41:49 -08:00
Vishnu Ks 1b8ca55dd2 requirements: Upgrade cffi to 1.11.4. 2018-02-14 09:41:49 -08:00
Vishnu Ks 9b93e8cba8 requirements: Upgrade argon2-cffi to 18.1.0. 2018-02-14 09:41:49 -08:00
Eeshan Garg d7903d25e9 pypi_packages: Upgrade to release 0.4.1. 2018-02-07 09:52:51 -08:00
rht f190888dfb django-2.0: Bump social auth version to 2.1.0. 2018-01-30 10:53:54 -08:00
Greg Price 455b77225f requirements: Note one requirement as needed only for zilencer.
Otherwise it's potentially puzzling why this is there, for an admin
looking at a normal install without zilencer.
2018-01-17 16:44:04 -08:00
Vishnu Ks 167a712922 requirements: Include stripe in common.in. 2018-01-17 16:12:32 -08:00
Eeshan Garg 30795c864d python-zulip-api: Upgrade to release 0.4.0. 2018-01-07 09:52:13 -05:00
Eeshan Garg 61089a9349 python-zulip-api: Upgrade to package release 0.3.9. 2017-11-28 22:16:43 -08:00
Tim Abbott b42ce65090 requirements: Add dependencies for two-factor auth.
We're not yet ready to add 2FA to Zulip yet, but we've determined we'd
like to work from these libraries.

I'm not bothering to bump PROVISION_VERSION for this, since we're
likely to do something else that bumps it soon, and we're not merging
anything that uses these new libraries.
2017-11-28 15:13:38 -08:00
Eeshan Garg c45517f544 python-zulip-api: Upgrade to PyPI package release 0.3.8.
There's one migration required by this release:

* queue_processors: Stop passing state_handler to handle_message.

  state_handler is now a property of bot_handler and thus, does
  not need to be passed to bot_handler.handle_message().

  The commit responsible is:
  2a74ad11c5
2017-11-27 20:31:37 -08:00
rht e169bb0954 zerver: Remove simplejson dependency.
Modified by tabbott to put the third-party code in a new file.

Fixes #6970.
2017-11-21 21:51:48 -08:00
Harshit Bansal e75f0c1ee4 requirements: Rename requirements files.
This commit renames various source requirements files like `dev.txt`,
`mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements
files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt`
etc. This will help in emphasizing to the user that *.in are actually
input to `update-locked-requirements` tool which should be run after
updating any of these.
2017-11-21 02:38:26 +05:30