Commit Graph

7736 Commits

Author SHA1 Message Date
Nick Steel
2a8375a947
docs: improve http/allowed_origins (Fixes #1719).
Be explicitly that should not include the scheme or default ports and given an example.
2018-10-29 11:26:26 +00:00
Stein Magnus Jodal
10c571b153
Merge pull request #1716 from kingosticks/fix/hang-on-stopping-http
http: use current Tornado IOLoop when stopping. (Fixes #1715).
2018-10-22 22:06:31 +02:00
Nick Steel
1d30e73ab0 http: use current Tornado IOLoop when stopping. (Fixes #1715).
This is in response to the breaking change in Tornado v5.0 where
IOLoop.instance is now a deprecated alias for IOLoop.current.
More info at https://www.tornadoweb.org/en/stable/releases/v5.0.0.html
2018-10-22 15:28:39 +01:00
Stein Magnus Jodal
e2b4a2749b Update MANIFEST.in to include .github and exclude .doctrees 2018-10-15 22:41:08 +02:00
Stein Magnus Jodal
9a7adc280f Release v2.2.1 2018-10-15 22:09:53 +02:00
Stein Magnus Jodal
7988708cbf Bump version to 2.2.1 2018-10-15 22:09:12 +02:00
Stein Magnus Jodal
d153e855f4 Merge master into release-2.2 2018-10-15 22:08:46 +02:00
Stein Magnus Jodal
c720d90b53 docs: v2.2.1 release notes 2018-10-15 22:08:07 +02:00
Stein Magnus Jodal
cce87edaa0 git: Ignore docs/.doctrees/ 2018-10-15 22:06:39 +02:00
Stein Magnus Jodal
2390f3a891
Merge pull request #1714 from kingosticks/feature/disable-http-csrf-config
http: Add config option to disable CSRF protection (Fixes: #1713)
2018-10-15 22:04:30 +02:00
Nick Steel
10fafc0228 http: Add config option to control CSRF protection (Fixes: #1713)
Allows users to disable CSRF protection and revert to the HTTP server's
previous (less secure) behaviour. Users are advised to leave this config
value enabled if possible. However, if disabled this will:
  * Remove the requirement to set a ``Content-Type: application/json``
    header for JSON-RPC POST requests.
  * Disable all same-origin checks, effectively ignoring the ``allowed_origins``
    config since requests from any origin will be allowed.
  * Suppress all ``Access-Control-Allow-*`` response headers.
2018-10-15 17:24:45 +01:00
Stein Magnus Jodal
9f7b3478d2
Merge pull request #1712 from kingosticks/fix/cors-breaking-changes
http: allow local files to access websocket (Fixes #1711)
2018-10-09 00:50:25 +02:00
Nick Steel
6e9ed9e8a9 http: allow local files to access websocket (Fixes #1711)
check_origin() still ensures the Origin header is set but now only blocks
when missing from the allowed list *if* a network location was extracted
from the header. This prevents websocket connections originating from
local files (common in Apache Cordova apps such as Mopidy-Mobile) from
being blocked; these files don't really have a sensible value for Origin
so the client browser sets the header to something like 'file://' or
'null'.

Also added some tests for check_origin().
2018-10-08 23:39:47 +01:00
Stein Magnus Jodal
0bc458cade docs: Minor tweaks 2018-10-09 00:25:44 +02:00
Nick Steel
043da0e871
docs: mention required Content-Type header 2018-10-08 17:38:39 +01:00
Nick Steel
4f8b755a2a
docs: update curl HTTP POST example
Must set 'Content-Type: application/json' header due to #1668
2018-10-08 17:24:59 +01:00
Nick Steel
4a75a39880
Merge pull request #1701 from vonZeppelin/develop
docs: Add Yandex.Disk backend
2018-10-02 23:39:20 +01:00
Leonid Bogdanov
aa9fde4dd9 Add Yandex.Disk backend 2018-10-01 20:53:16 +10:00
Stein Magnus Jodal
e025f04160 Release v2.2.0 2018-09-30 00:28:47 +02:00
Stein Magnus Jodal
d6a920aacb Bump version number to 2.2.0 2018-09-30 00:28:23 +02:00
Stein Magnus Jodal
b62c153425 docs: v2.2.0 release notes 2018-09-30 00:09:48 +02:00
Stein Magnus Jodal
c83132b5ec Update AUTHORS 2018-09-30 00:03:57 +02:00
Stein Magnus Jodal
7a0ade4112 tox: Remove pytest-xdist
This seems to fix the Travis build that recently started getting an
ImportError on `gobject`.
2018-09-29 23:32:30 +02:00
Nick Steel
09240dae2f
Merge pull request #1702 from jodal/fix/m3u-arbitrary-file-access
Fix arbitrary file access in M3U backend
2018-09-27 22:52:32 +01:00
Stein Magnus Jodal
58e75b2b7a m3u: Ignore paths outside the playlist_dir
Fixes #1659
2018-09-19 22:27:18 +02:00
Stein Magnus Jodal
23e73d962b core: Define playlists.delete() return type 2018-09-19 22:27:18 +02:00
Stein Magnus Jodal
60546c595a m3u: Avoid using deprecated methods in tests 2018-09-19 22:27:18 +02:00
Stein Magnus Jodal
3366780eed m3u: Avoid mutable default value 2018-09-19 22:27:18 +02:00
Stein Magnus Jodal
a61cdf4823 Merge branch 'release-2.1' into develop 2018-09-19 22:26:36 +02:00
Stein Magnus Jodal
2fb7885c56 Merge branch 'master' into release-2.1 2018-09-19 22:25:58 +02:00
Stein Magnus Jodal
faea0c638c docs: Avoid Sphinx 1.8.0, which fails on Python 2.7
See https://github.com/sphinx-doc/sphinx/issues/5417
2018-09-19 21:37:17 +02:00
Stein Magnus Jodal
0efbe981f5 tox: Ensure Sphinx from within tox env is used 2018-09-19 21:33:43 +02:00
Nick Steel
2ee1300571
Merge pull request #1689 from vonZeppelin/fix-typo
models: Fix typo in __all__ list
2018-07-02 17:25:16 +01:00
Leonid Bogdanov
ee2c36b0f2
Fix typo in __all__ list 2018-06-24 22:37:25 +10:00
Stein Magnus Jodal
f267e8db20 Merge branch 'release-2.1' into develop 2018-06-05 22:18:08 +02:00
Stein Magnus Jodal
e9f5c6cb06 Merge branch 'master' into release-2.1 2018-06-05 22:17:39 +02:00
Stein Magnus Jodal
99f6ae2a5c docs: Remove Mopidy-Notifier extension
Upstream seems to have disappeared.
2018-06-04 02:32:11 +02:00
Mark Greenwood
b01f3f5486 Update URL and image in docs for RompR MPD client 2018-06-04 02:31:25 +02:00
Damien Cassou
029ed5f0b0 docs: Add MPDel client 2018-06-04 02:31:10 +02:00
Stein Magnus Jodal
69ef2ef9ba docs: MPRIS playlists interface is implemented 2018-06-04 02:30:52 +02:00
Stein Magnus Jodal
b3d9d7106e docs: Fix testing example 2018-06-04 02:30:41 +02:00
Nick Steel
65014ad475
Merge pull request #1677 from fatg3erman/develop
docs: Update URL and image in docs for RompR MPD client
2018-05-14 15:59:17 +01:00
Mark Greenwood
5a81399a53 Update URL and image in docs for RompR MPD client 2018-05-14 15:17:50 +01:00
Stein Magnus Jodal
97a089ed3a
Merge pull request #1673 from DamienCassou/docs/add-mpdel-client
docs: Add MPDel client
2018-05-08 14:06:00 +02:00
Damien Cassou
dea72384ae
docs: Add MPDel client 2018-05-08 12:58:39 +02:00
Stein Magnus Jodal
9f69805fa7 docs: Tweak changelog 2018-04-19 20:54:18 +02:00
Stein Magnus Jodal
2cb7993316
Merge pull request #1621 from kingosticks/fix/mpd-load-tracklist-metadata
Lookup track metadata for MPD load and listplaylistinfo
2018-04-19 20:53:24 +02:00
Stein Magnus Jodal
18b828481f
Merge pull request #1669 from kingosticks/docs/update-raspberry-pi
Some updates to the Raspberry Pi install guide.
2018-04-17 08:40:26 +02:00
Nick Steel
ba708001f4 docs: updates to the Raspberry Pi install guide. 2018-04-16 23:25:54 +01:00
Nick Steel
e87599a2d3 Explicitly check for None (core playlists API future proofing). 2018-04-15 21:21:59 +01:00