arxiv-auth with python 3.10 #78
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
users.init_app and legacy.init_app were pointing to the same function. users.create_all and legacy.create_all were pointing to the same function.
This was just redirection to packages in `arxiv.users`
More clean up of indirection
It was just importing things from `arxiv.users`
Fixes pillow dep issue
Tests under ./arxiv-auth pass The intent is to better show the relation between the directory and the package. Fixes tests in arxiv-auth/arxiv_auth/auth/tests/test_extension.py
And other fixes
Changes to lint.sh and style.sh Doc style fixes.
Fixes yaml error
Change to deps to try to get github actions to work
This fixes a bug where the query to get a session from the db was not limiting to the session id from the cookie.
Setting either `Flask.config['ARXIV_AUTH_DEBUG']` or env var ARXIV_AUTH_DEBUG will turn on logging debugging messages for several auth packages.
It is no longer needed and and causes unnecessary configuration complexity and problems. The AUTH_UPDATED_SESSION_REF was only in place to ease the transition from placing the auth object on `request.session` to `request.auth`. Placing in at `request.session` was a mistake during the NG because it interfered with flask sessions. Also bumps version from 1.0 to 1.1.
Used by vault but we don't use vault anymore.
Just reorganizing config.py to make it more clear.
To reduce the chance of problems in the case of a misconfigure
Still need to add the required config for auth.
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| ) | ||
| salt = b'fdoo' | ||
| password = b'thepassword' | ||
| hashed = hashlib.sha1(salt + b'-' + password).digest() |
Check failure
Code scanning / CodeQL
Use of a broken or weak cryptographic hashing algorithm on sensitive data High test
| ) | ||
| salt = b'fdoo' | ||
| password = b'thepassword' | ||
| hashed = hashlib.sha1(salt + b'-' + password).digest() |
Check failure
Code scanning / CodeQL
Use of a broken or weak cryptographic hashing algorithm on sensitive data High test
The call to legacy init_app is also made in arxiv_auth.auth.Auth() so it is redundant.
Merges to python 3.10 code
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This includes fixes to use arxiv-auth and accounts with python 3.10.
The
usersdirectory is moved toarxiv-authto reflect that that is the directory with the code that is uploaded to pypi as the arxiv-auth package.The dependency management is changed from pipenv to poetry. The main motivation here is that poetry has
poetry uploadto build the package and upload to pypi. This removes the need for the redundant setup.py files.Instead of having a dependency description file at
./there is now one at both./arxiv-authand./accountsto more directly reflect the fact that these are two different packages. The dependencies in both of these are updated to use newer packages and python 3.10. I developed this with 3.10.6.Tests were updated to work. There were problems with mocks that needed the Flask request context. There were tests that also needed the request context. Some tests were converted to pytest from UnitTest.
Some of the docs were updated. Please let me know where these are not clear. "NG" was removed in several places since we are moving on.