Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix/upgrade flask #371

Merged
merged 12 commits into from Nov 14, 2023
Merged

Fix/upgrade flask #371

merged 12 commits into from Nov 14, 2023

Conversation

george42-ctds
Copy link
Contributor

@george42-ctds george42-ctds commented Oct 27, 2023

Jira Ticket: PPS-655

New Features

Breaking Changes

Bug Fixes

Improvements

Dependency updates

  • Upgrade Flask

Deployment changes

@github-actions
Copy link

The style in this PR agrees with black. ✔️

This formatting comment was generated automatically by a script in uc-cdis/wool.

@k-burt-uch k-burt-uch mentioned this pull request Oct 30, 2023
1 task
k-burt-uch
k-burt-uch previously approved these changes Oct 31, 2023
paulineribeyre
paulineribeyre previously approved these changes Nov 2, 2023
k-burt-uch
k-burt-uch previously approved these changes Nov 7, 2023
Copy link
Contributor

@k-burt-uch k-burt-uch left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Outside of the flask version update and poetry lock, the only other change is ensuring Basic authorization is used before going through the username/password authz path rather than just relying on the presence of the authorization header in the request.

Approved.

current_app.auth.auth(
request.authorization.username, request.authorization.password
request.authorization.parameters.get("username"),
request.authorization.parameters.get("password"),
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This change is needed after upgrading werkzeug (upgrades to Authorization object).

@george42-ctds george42-ctds merged commit 575d497 into master Nov 14, 2023
11 checks passed
@george42-ctds george42-ctds deleted the fix/upgrade-flask branch November 14, 2023 17:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants