CHANGES.rst

3.4.0

• Salt passwords.
  • Added user.salted field.
  • Updated auth view to salt passwords when signing up.
  • Updated auth view to replace old passwords in the database when logging in.
  • Updated auth view to properly check for password validity.
  • Updated user update view to salt password when changing it.
• Configured logging in development.ini.
• Increased the maximum length of short description to 300 characters.
• Forbade using uppercase characters in package names.

3.3.1

• Fixed the issue in list_users where only the left-most digit of offset was read.

3.3.0

• Added versions.files.path, deprected versions.files.dir and versions.files.name.

3.2.0

• Made it possible to change user password.
• Made q search param case-insensitive.

3.1.0

• Added owners search param.
• Added q search param.
• Added group ~banned.
• Wrapped User:PATCH.

3.0.3

• Added dependency remove code.
• Refactored the code of package update route a bit.
• Removed compatibility code.
• Removed an ACE granting all permissions to ~allperms.

3.0.2

• Added the PATCH request method to the list of allowed HTTP methods.
• Added the line of code to actually change the name of a package.
• Fixed crash when sending preflight CORS request without Access-Control-Request-Headers.

3.0.1

• Reissue tickets on every request. They become invalid after log out.
• Respond with 200 OK instead of 204 No Content if tried to log-in or register when logged in.
• Copypasted a more advanced solution to CORS problem.

3.0.0

• Unified responses.
• Refactored the code.
• Removed stats.downloads.
• Renamed data.data (Packages:GET) to data.list.
• Added the same metadata to the response of Users:GET as the Packages:GET's.
• Always set Content-Type to application/json.

2.1.1

• Added more CORS headers.

2.1.0

• Added the /profile route.

2.0.1

• Fixed a bug when version details could contain only some of required fields.

2.0.0

• Change the response of Packages:GET.
• When the user is logged in, don't respond with the 400 Bad Request message if they send some action, other than log-out.
• Packages now can have multiple owners.
• Usernames are checked against a regex ([A-Za-z0-9-_]+).

1.0.0

The first stable API release.

• Added stats.date field.

0.7.2

• Added URL validity checks.

0.7.1

• Removed passwd-confirm param.

0.7.0

• Made the /auth view process application/json instead of application/x-www-form-urlencoded (that was illogical).

0.6.1

• Made the previous change not breaking.

0.6.0

• Add the stats.views field. This breaks existing packages.

0.5.0

• Changed the replacement character. This breaks existing packages.
• Made error messages unified.

0.4.1

• Added Access-Control-Allow-Origin header for cross-origin AJAX API requests.
• Fixed strange log in and log out behaviours.

0.4.0

• Separated the auth logic from the home view, effectively enabling authorization via API.

0.3.2

• Added versions.num.changes field.

0.3.1

• Minor updates.

0.3.0

• Wrappers for the remaining views.
  • A wrapper around package creating.
  • A User:GET wrapper.
  • A User:POST wrapper.
• 100% test coverage.

0.2.0

• Short description search.
• Disabled use of GET params for authorization.
• Added a teapot.
• Fixed an issue where the forms were shown before loading the page.
• Implementation of package updating (i.e., Package:PUT wrapper).
• Updated package model, breaking many things depending on the old one.
  • Reimplementation of some classes related to search.
• Set up Travis CI.

0.1.0

• Authentication and authorization.
• Added tests.
• Packages:GET, Users:GET wrappers.

0.0.2

• Updated landing design.
• Basic package search.

0.0.1

• The beginning of the story.
• Simple /package controller.