Hello,
On Sun, Mar 27, 2011 at 1:08 AM, Jason Grout
<jason-s...@creativetrax.com> wrote:
> Rado or Mike: how do you think we should get jmol requests to be recognized
> as requests coming from an authenticated user?
The issue is that the secure cookie that Flask uses is sent as
httponly, which the Java applet won't send. Adding this patch to the
notebook code will fix that:
diff --git a/flask_version/base.py b/flask_version/base.py
--- a/flask_version/base.py
+++ b/flask_version/base.py
@@ -47,6 +53,28 @@
endpoint='/static'+base_url,
view_func=partial(self.static_view_func, root_path))
+ def save_session(self, session, response):
+ """
+ This method needs to stay in sync with the version in Flask.
+ The only modification made to it is the ``httponly=False``
+ passed to ``save_cookie``.
+
+ Saves the session if it needs updates. For the default
+ implementation, check :meth:`open_session`.
+
+ :param session: the session to be saved (a
+ :class:`~werkzeug.contrib.securecookie.SecureCookie`
+ object)
+ :param response: an instance of :attr:`response_class`
+ """
+ expires = domain = None
+ if session.permanent:
+ expires = datetime.utcnow() + self.permanent_session_lifetime
+ if self.config['SERVER_NAME'] is not None:
+ domain = '.' + self.config['SERVER_NAME']
+ session.save_cookie(response, self.session_cookie_name,
+ expires=expires, httponly=False, domain=domain)
+
def message(self, msg, cont='/', username=None, **kwds):
"""Returns an error message to the user."""
template_dict = {'msg': msg, 'cont': cont, 'username': username}
This still doesn't fix the issue for me, since the Jmol applet then
requests the .zip file from the worksheet directory rather than the
cell directory (and gets a 404). However, this should not be too hard
to track down.
--Mike
--
To post to this group, send an email to sage-devel@googlegroups.com
To unsubscribe from this group, send an email to
sage-devel+unsubscr...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/sage-devel
URL: http://www.sagemath.org
