GitLab

The link returned by APIJobView starts with api/v1, this allows the...

Closes #350

See merge request !188

The link returned by APIJobView starts with api/v1, this allows the authentication by token, which make file downloading work.

Update of the command used to generate an image of the data model (~django DB). Now we do not have to be in the container anymore to run it.

The 2 constraints identified placed in the README file.

Closes #308

See merge request !166

deletion of django/requirements_dev.txt

Closes #331

See merge request !180

unlock the root account before running a sandbox

See merge request !181

BAIRE Anthony authored Aug 27, 2019 and LETORT Sebastien committed Aug 27, 2019

Fedora images come with their root account locked.
This prevents opening a ssh session.

Resolve "APIDownloadView doesn't seem to work"

Closes #119, #311 et #306

See merge request !178

- API requests authenticated by token
- UI requests authenticated by cookie

fix #311 and #119

(because this endpoint is security-related)

(error messages for the sysadmin should be sent to the logs,
 not to the user)

django-nginx conf file has been reordered, and API location has been slightly rewritten with inner locations.

Here we conserved the CORS principles and make them used to all API, datastore included.
Note that trying to get a file with the api (api/v1/datastore/...) will return a 404.
-> but the end user has no reason to known this path.

APIDownloadView correction. Url match request, View returns a json error, and auth view allow to reach api/v1/datastore, not only /datastore.
The idea is to make the code explains that the file should be served by nginx. It has to be accessible in http mode (dev) only.

Minor refactoring

See merge request !168

Resolve "nano error in sandbox (toolbox related)"

Closes #316

See merge request !176

it seems that debian moved '/usr/bin/nano' to '/bin/nano'

restore API legacy json returned format.

Closes #317

See merge request !175

It could though be used in a future V2.
Note that I used get_state_display in APIJobView instead of the local dictionnary.

Purge rails

See merge request !173

New location rule to manage CORS for API only.

Closes #314

See merge request !171

(which was previously named 'docker')

Removing .env and data files before launching bootstrap.

Closes #320

See merge request !174