[#8557] Upgrade requests-oauthlib 1.3.1 -> 2.0.0, and its deps: oauthlib,requests,certifi,charset-normalizer,idna,urllib3
[#8557] Upgrade python-dateutil 2.8.2 -> 2.9.0. (OUTDATED! latest is: 2.9.0.post0), and its deps: six
[#8557] Upgrade Pypeline 0.6.1 -> no upgrade, and its deps: bleach,six,webencodings,html5lib,six,webencodings,Creoleparser,Genshi,six,six,Markdown,textile,html5lib,six,webencodings,regex,docutils
[#8557] Upgrade PasteScript 3.4.0 -> 3.5.1, and its deps: Paste,setuptools,six,PasteDeploy,setuptools,six
[#8557] Upgrade Markdown 3.5.2 -> 3.6
[#8557] Upgrade GitPython 3.1.41 -> 3.1.43, and its deps: gitdb,smmap
[#8557] Upgrade emoji 2.9.0 -> 2.11.0
[#8557] Upgrade beaker-session-jwt 1.0.1 -> no upgrade, and its deps: Beaker,joserfc,cryptography,cffi,pycparser,pymongo
[#8557] Upgrade Beaker 1.12.1 -> 1.13.0
[#8557] Upgrade beautifulsoup4 4.12.2 -> 4.12.3, and its deps: soupsieve
[#8557] Upgrade ActivityStream 0.4.2 -> no upgrade, and its deps: pymongo
Upgrade python packages
First pass of feedback, also including earlier merge request(s). More to come probably, but I wanted to give you what I have so far: the commits should use Allura ticket numbers. I found a ticket for oauth2 support here: https://forge-allura.apache.org/p/allura/tickets/7272/ so can you rebase the branch and edit the commit messages to be [#7272]? test_revoke_tokens fails comparing model classes to oauth1 ones: those that have a user_id field, you can add a user = RelationProperty('User') line similar...
Add tests to OAuth2 features
bump idna 3.6 -> 3.7
Add authorization view for OAuth2 support
[#8556] simplify more calls
[#8556] remove unnecessary extra () on has_access calls
[#8556] avoid recursive TruthyCallable
check blocked users better
merged
[#8555] debugging option within has_access
[#8555] some specific checks for blocked users, when creating new forum threads
bump Pillow package 10.2.0 -> 10.3.0
check blocked users better
[#8556] simplify more calls
[#8556] remove unnecessary extra () on has_access calls
[#8556] avoid recursive TruthyCallable
[#8555] debugging option within has_access
[#8555] some specific checks for blocked users, when creating new forum threads
deprecate and remove has_access(..)() syntax
db/8556 on allura, forgehg, and forgepastebin db/8556-breaking-removal needs to be merged later, after we do a release and give anyone a chance to update their code. You can review and test it though.
[#8556] unindent block
[#8556] remove TruthyCallable and predicate stuff used by has_access
[#8556] simplify more calls
[#8556] remove unnecessary extra () on has_access calls
[#8556] avoid recursive TruthyCallable
[#8555] debugging option within has_access
[#8555] some specific checks for blocked users, when creating new forum threads
deprecate and remove has_access(..)() syntax
db/8555 It was tempting to change this has_access code: # access is denied for this role break to be return False. That would've fixed this situation, but made several other tests fail. Instead, I decided it'd be better to change a few non-core places, and not change the core has_access logic (even if maybe it deserves a refactor some day)
check blocked users better
fix wiki page 'recent' sort
Looks good I'll merge
fix wiki page 'recent' sort
fixed on db/8540 there aren't any tests, and I didn't add any. But you can test manualyl: create just 4 or 5 wiki pages and then go Browse Pages, then click on the sort options. Then add &limit=2 to the URL to force small page sizes to see the problem & verify the fix.
[#8540] wiki pages' recent sort by mod_date; simplify code
fix wiki page 'recent' sort