Skip to content

update setup.py requirements to use Flask 2 - #18

Open
nickhilliard wants to merge 11 commits into
catalyst:masterfrom
nickhilliard:master
Open

nickhilliard wants to merge 11 commits into
catalyst:masterfrom
nickhilliard:master

Conversation

@nickhilliard

Copy link
Copy Markdown

No description provided.

nickhilliard and others added 11 commits November 13, 2023 19:01
and 3.1.3 with deprecation warnings treated as errors, with no code changes
required over Flask 1.

Drop pytest-flask: the tests define their own client fixture and use
none of its fixtures. Remove the Flask 1.x reference from the README.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
contain non-ASCII characters, so a Basic auth password or X-API-Key
with such characters made the proxy return 500. Compare the keys as
UTF-8 bytes instead.

The existing auth tests only asserted status_code > 400, which a 500
also satisfies, so add a test that requires exactly 401.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
deprecation of earlier versions.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- Default-deny zone creation. The allow-suffix-creation check was only
  applied when the key was present in a user's config, so any
  authenticated user without that key could create arbitrary zones
  (they became the owner via the account override). Absence of the key
  now means no creation rights, and an empty rule denies as well.

- Reject empty configured keys. A user configured with "key =" (empty)
  could be authenticated with an empty password over both X-API-Key and
  Basic auth. Treat an empty stored key as never matching.

- Return 400 instead of 500 when a zone-creation request has no "name"
  (or a non-string name), which previously raised an unhandled
  AttributeError.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
without the setting cannot create zones.  Use "allow-suffix-creation = ." to
allow any zone.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant