40 commits

Author	SHA1	Message	Date
Simon Willison	f39f111331	Fixed actor_matches_allow bug, closes #836	2020-06-11 15:47:19 -07:00
Simon Willison	98632f0a87	--secret command for datasette publish ... Closes #787	2020-06-11 09:02:03 -07:00
Simon Willison	7633b9ab24	unauthenticated: true method plus allow block docs, closes #825	2020-06-09 10:01:03 -07:00
Simon Willison	fa87d16612	Clearer docs for actor_matches_allow	2020-06-09 07:10:46 -07:00
Simon Willison	fec750435d	Support anonymous: true in actor_matches_allow, refs #825	2020-06-09 07:01:23 -07:00
Simon Willison	f5e79adf26	register_routes() plugin hook (#819) ... Fixes #215	2020-06-08 20:12:06 -07:00
Simon Willison	799c5d5357	Renamed resource_identifier to resource, refs #817	2020-06-08 11:59:53 -07:00
Simon Willison	c9f1ec616e	Removed resource_type from permissions system, closes #817 ... Refs #811, #699	2020-06-08 11:51:03 -07:00
Simon Willison	e18f8c3f87	New check_visibility() utility function, refs #811	2020-06-08 06:49:55 -07:00
Simon Willison	3f83d4632a	Respect query permissions on database page, refs #800	2020-06-06 12:05:22 -07:00
Simon Willison	14f6b4d200	actor_matches_allow utility function, refs #800	2020-06-06 11:39:11 -07:00
Simon Willison	84a9c4ff75	CSRF protection (#798) ... Closes #793. * Rename RequestParameters to MultiParams, refs #799 * Allow tuples as well as lists in MultiParams, refs #799 * Use csrftokens when running tests, refs #799 * Use new csrftoken() function, refs https://github.com/simonw/asgi-csrf/issues/7 * Check for Vary: Cookie hedaer, refs https://github.com/simonw/asgi-csrf/issues/8	2020-06-05 12:05:57 -07:00
Simon Willison	d96ac1d52c	Allow tuples as well as lists in MultiParams, refs #799	2020-06-05 11:01:06 -07:00
Simon Willison	0da7f49b24	Rename RequestParameters to MultiParams, refs #799	2020-06-05 10:52:50 -07:00
Simon Willison	124acf34a6	Removed db.get_outbound_foreign_keys method ... It duplicated the functionality of db.foreign_keys_for_table.	2020-05-30 11:39:46 -07:00
Simon Willison	81be31322a	New implementation for RequestParams ... - no longer subclasses dict - request.args[key] now returns first item, not all items - removed request.raw_args entirely Closes #774	2020-05-29 16:22:22 -07:00
Simon Willison	84616a2364	request.args.getlist() returns [] if missing, refs #774 ... Also added some unit tests for request.args	2020-05-29 15:51:30 -07:00
Simon Willison	5ab411c733	can_render mechanism for register_output_renderer, closes #770	2020-05-27 22:57:05 -07:00
Simon Willison	41a0cd7b6a	call_with_supported_arguments() util, refs #581	2020-05-27 12:25:52 -07:00
Simon Willison	2d099ad9c6	Backport of Python 3.8 shutil.copytree, refs #744 (#769)	2020-05-27 11:17:43 -07:00
Simon Willison	cee671a58f	Use dirs_exist_ok=True, refs #744 (#768)	2020-05-21 10:53:51 -07:00
Simon Willison	4433306c18	Improvements + docs for db.execute() and Results class ... * Including new results.first() and results.single_value() methods. Closes #685	2020-05-08 09:05:46 -07:00
Simon Willison	0784f2ef9d	Allow specific pragma functions, closes #761	2020-05-06 10:18:31 -07:00
Simon Willison	d349d57cdf	Smarter merging of metadata and extra_metadata, closes #724	2020-04-10 11:34:09 -07:00
Simon Willison	6717c719dd	--metadata accepts YAML as well as JSON - closes #713	2020-04-02 12:30:53 -07:00
Simon Willison	e1b5339fdf	Do not look for templates_path in default plugins ... Closes #697	2020-03-08 16:11:18 -07:00
Simon Willison	d3f2fade88	Refactored run_sanity_checks to check_connection(conn), refs #674	2020-02-15 09:56:48 -08:00
Simon Willison	298a899e79	Reformatted with black	2020-02-12 22:05:46 -08:00
Jay Graves	33a12c8ae5	Allow leading comments in SQL input field (#653) ... Thanks, @jaywgraves!	2020-02-04 18:13:24 -08:00
Simon Willison	67fc9c5720	--port argument for datasette package, plus tests - closes #661 ... From pull request #663	2020-01-29 14:46:43 -08:00
Simon Willison	3c861f363d	_search= queries now correctly escaped, fixes #651 ... Queries with reserved words or characters according to the SQLite FTS5 query language could cause errors. Queries are now escaped like so: dog cat => "dog" "cat"	2019-12-29 18:48:30 +00:00
Simon Willison	df2879ee2a	Better documentation for --static, closes #641 ... https://datasette.readthedocs.io/en/stable/custom_templates.html#serving-static-files	2019-11-25 18:31:42 -08:00
Simon Willison	d977fbadf7	datasette publish uses python:3.8 base Docker image, closes #629	2019-11-11 22:03:09 -08:00
Simon Willison	937828f946	Use distinfo.project_name for plugin name if available, closes #606	2019-10-31 22:39:59 -07:00
Simon Willison	fffd69ec03	Allow EXPLAIN WITH... - closes #583	2019-10-06 10:23:58 -07:00
Simon Willison	2dc5c8dc25	detect_fts now works with alternative table escaping (#571) ... Fixes #570. See also https://github.com/simonw/sqlite-utils/pull/57	2019-09-02 17:32:27 -07:00
Abdus	74ecf8a7cc	Fix static mounts using relative paths and prevent traversal exploits (#554) ... Thanks, @abdusco! Closes #555	2019-07-11 09:13:19 -07:00
Simon Willison	973f8f139d	--plugin-secret option for datasette publish ... Closes #543 Also added new --show-files option to publish now and publish cloudrun - handy for debugging.	2019-07-07 19:06:31 -07:00
Simon Willison	f0d32da0a9	Switch to ~= dependencies, closes #532 (#536) ... * Switch to ~= dependencies, closes #532 * Bump click and click-default-group * imp. is deprecated, use types.ModuleType instead - thanks https://stackoverflow.com/a/32175781 * Upgrade to pytest 5	2019-07-02 21:32:55 -07:00
Simon Willison	ba8db9679f	Port Datasette from Sanic to ASGI + Uvicorn (#518) ... Datasette now uses ASGI internally, and no longer depends on Sanic. It now uses Uvicorn as the underlying HTTP server. This was thirteen months in the making... for full details see the issue: https://github.com/simonw/datasette/issues/272 And for a full sequence of commits plus commentary, see the pull request: https://github.com/simonw/datasette/pull/518	2019-06-23 20:13:09 -07:00

Renamed from datasette/utils.py (Browse further)