1169 Commits

Author SHA1 Message Date
095f1cda0c Added "Switch user" functionality.
The user isn't logged out until the new user logs in. This allows you to
click on "Log in as different user", hit the back button, and still be
logged in.
2017-05-05 12:56:19 +02:00
c3eb97e24c Log redirect URL for users after logging in with Blender ID. 2017-05-05 12:55:29 +02:00
b1b91a7b29 Timeout (10s) on store API calls + better exception handling
We now log connection errors, timeouts, and other Requests errors, and
return None so that the login flow of the user can continue.
2017-05-05 12:55:05 +02:00
870800e8d2 Stop flashing 'Please log in to access this page.'
This message was "flashed" (http://flask.pocoo.org/docs/0.12/patterns/flashing/)
by Flask-Login. This happens on every unauthorised request, so also on
AJAX requests (like for the notifications). As a result, a user could be
spammed by a screen full of these messages if they left their window open
and their session timed out.
2017-05-05 10:40:08 +02:00
379d40837b Fixed issues logging in.
The API call to /api/bcloud/update-subscription is now performed via the
SDK, to ensure proper authentication. Also streamlined some other code.
2017-05-05 10:29:16 +02:00
10a40ddabd Make Blender ID URL work with live URL too 2017-05-04 18:29:11 +02:00
118de12712 Always return a HTTP response 2017-05-04 18:24:08 +02:00
cfa31ab542 JS mistake 2017-05-04 18:23:55 +02:00
47ba5e18a3 Give users a "Re-check my subscription" button. 2017-05-04 18:15:35 +02:00
1a54b723aa Reworked subscription/demo role management from web to API level.
In the old situation, users had to be able to change their own roles. This
is inherently insecure.
2017-05-04 17:49:18 +02:00
d0557445cd Fix privilege escalation leak
A PUT request on /api/user/{user-id} by the user themselves would allow
too much, and would allow self-granting of roles (including admin),
group membership (so join any arbitrary project) and pretend to be
service accounts.
2017-05-04 12:48:30 +02:00
1ad3e7910c Upgrade algoliasearch 2017-04-11 12:08:57 +02:00
49895805e3 Display project description in instead of summary 2017-04-07 09:02:08 +02:00
bd3f8d597a Allow upload of videos > 1080p
Videos that are larger than 1920x1080 pixels are scaled down so that they
fit that size. Care is taken to keep the width a multiple of 16 pixels and
the height a multiple of 8.
2017-03-31 14:52:58 +02:00
c711a04e6c Added some type annotations (no functional differences) 2017-03-31 13:14:07 +02:00
1cb7a92e40 Removed old mock-EncoderJob and replaced it with a dict
The real value is a dict too, anyway.
2017-03-31 13:12:08 +02:00
d8640df115 Made markdown jinja filter None-safe 2017-03-30 09:37:48 +02:00
4c704c8cda Pipe description & content of featured nodes through markdown 2017-03-30 09:23:59 +02:00
6f9feea8a9 Locally hosting jstree, instead of linking to cloudflare.
Should speed up the site, and remove a possible point of failure.

This also upgrades JSTree to the latest version (3.3.3).
2017-03-29 16:57:26 +02:00
dde5526022 Updated HDRi specifics in the "join" page 2017-03-29 16:46:49 +02:00
34a6fb064c Removed illegal 'home_project' tag 2017-03-29 16:43:08 +02:00
cecc9bc7fb Added "Copy yaw" button to HDRIs
The button is only shown to people with the right to edit the current
node. I've also simplified some CSS, with the help of @venomgfx.
2017-03-28 18:11:08 +02:00
9ccf4474bc Fix for missing tag in Markdown validator 2017-03-28 17:54:10 +02:00
3622fad9c2 Merge remote-tracking branch 'origin/master' 2017-03-28 16:43:22 +02:00
c846ee9823 Add support for video tag 2017-03-28 16:43:12 +02:00
fd541d2243 Changed interpretation of '' in form handling of integer properties. 2017-03-28 16:04:40 +02:00
fcaa4fb936 Upgraded VRViewer:
- upgraded vrviewer to latest master (ffbc9ff4bf0c550cc79003ec188ca16e9e83c31e)
- added some notes on how to upgrade to the readme
- added support for setting default yaw angle
- added support for float properties
2017-03-28 16:04:26 +02:00
ddfb69edb2 group_hdri: remove double title 2017-03-28 14:08:15 +02:00
fac56943ee group_hdri: remove unused preview
This div contained the same image as otherwise shown, except that it was
never shown.
2017-03-28 14:08:15 +02:00
8330488c0a group_hdri: show unpublished children for current user.
Previously you weren't even allowed to see your own "pending" items.
2017-03-28 14:08:15 +02:00
6001f1936c Tweak to utm_source handling 2017-03-24 17:14:29 +01:00
46c019a758 Add support for utm_source 2017-03-24 11:47:12 +01:00
b2ed441bf7 Fix width of node add/edit 2017-03-23 18:53:39 +01:00
373be03c80 Groups: browse type list tweaks to match browse as icons 2017-03-23 18:53:24 +01:00
ce5e27814a Blog: Fix top bar not full width 2017-03-23 18:52:24 +01:00
24468159e7 Gulp: Only cache templates/scripts if not gulping for production 2017-03-23 12:44:33 +01:00
7153c8adde Added mypy to requirements-dev.txt 2017-03-23 12:07:03 +01:00
41414319a5 Merge branch 'master' into wip-storage-backend 2017-03-23 12:06:36 +01:00
a3513aa45c Update background for Agent 327 on join pages 2017-03-22 21:56:43 +01:00
1ed31d26e5 Be more explicit in logging which video encoding service is used 2017-03-22 17:08:15 +01:00
b36dc63335 Added simple mocking test for GCS 2017-03-22 16:43:17 +01:00
c02c6d89b0 Removed unused import 2017-03-22 16:43:04 +01:00
563bb2c244 Added unittest for Bucket.copy_to_bucket() 2017-03-22 16:14:06 +01:00
6b526f6b53 Fixed bug in local file storage URL generation. 2017-03-22 16:05:38 +01:00
cce388049d Big refactoring of file storage handling
- Moved pillar.api.utils.{gcs,storage} to pillar.api.file_storage_backends
- Implemented GCS and local storage using abstract Bucket and Blob classes
- Removed file processing from the Blob class, and kept it in the
  file_storage/__init__.py class. That way storage and processing are
  kept separate.
2017-03-22 15:49:56 +01:00
fdfdd38c38 Removed route for direct GCS storage browsing 2017-03-22 15:49:52 +01:00
56b631d4a2 Added type annotations 2017-03-22 15:49:52 +01:00
6eadc09c10 Use __init_subclass__ to register storage backends
See https://docs.python.org/3.6/whatsnew/3.6.html#pep-487-simpler-customization-of-class-creation
2017-03-22 15:49:52 +01:00
1f3d699a0c Ran 2to3 on pillar/api/utils/storage.py 2017-03-22 15:49:52 +01:00
0eb2f17624 Raise exception on not-implemented methods, instead of just pass'ing 2017-03-22 15:49:52 +01:00