{"push_id":580852107,"size":1,"distinct_size":1,"ref":"refs/heads/auth","head":"72a3939cb015e97d64b589379506f8c670d200a5","before":"eee3395b29769f0cba079419b765f38491bab208","commits":[{"sha":"72a3939cb015e97d64b589379506f8c670d200a5","author":{"email":"1dbff935ba51fd81e3d9b3e714b76c667f125b54@gmail.com","name":"jathanism"},"message":"Implemented API key (auth_token) authentication\n\n+ Cookies are now stored as secure cookies using cookie_secret setting.\n+ New site setting for storing secret_key used for crypto.\n+ User has a new .secret_key field which is generated when User is\n  created\n\n  - User should obtain key through web UI (however that is NYI)\n  - Secret key is used as user password to generate an auth_token\n\n+ Auth token is serialized, and encrypted with server's key and also\n  contains an expiration timestamp (default 10 minutes)\n+ AuthToken can be done using \"Authorization\" header or query args.\n+ New User methods for generating and validating auth_token\n+ API endpoints still also accept \"default\" login methods.\n+ Added a models.get_db_session() function to make getting a session\n  easier!\n+ Added a Model.query classmethod to make model queries easier!!\n+ All new changes are unit tested!\n+ If you're checking out the API auth stuff and want to test it out, see\n  the README.auth.rst file!\n+ Web views use \"default\" auth (currently user_auth_header)\n+ API views use \"default\" or \"auth_token\"\n+ AuthToken can now be done using \"Authorization\" header or query args.","distinct":true,"url":"https://api.github.com/repos/jathanism/nsot/commits/72a3939cb015e97d64b589379506f8c670d200a5"}]}