Fellow Reports - May 2020

2020-05-11 Thread Mariusz Felisiak
Week ending May 10, 2020.

Released Django 3.0.6.

*Triaged:*
https://code.djangoproject.com/ticket/31531 - Loaddata fixtures with UUID 
as primary key. (duplicate)
https://code.djangoproject.com/ticket/31532 - Deprecate {% ifequal %} and 
{% ifnotequal %} template tags in favor of {% if %}. (duplicate)
https://code.djangoproject.com/ticket/31533 - Test client request's post 
body can be read multiple times, unlike real requests. (invalid)
https://code.djangoproject.com/ticket/31528 - collectstatic doesn't run 
staticfiles checks. (accepted)
https://code.djangoproject.com/ticket/31534 - Deprecate 
django.conf.urls.url(). (accepted)
https://code.djangoproject.com/ticket/31535 - Calling annotate with a case 
statement that references a recursive many to many relationship creates 
duplicates. (invalid)
https://code.djangoproject.com/ticket/31538 - models.E015 is raised when 
ordering uses lookups that are not transforms. (accepted)
https://code.djangoproject.com/ticket/31537 - Optionally log server_time 
with timezone. (wontfix)
https://code.djangoproject.com/ticket/27408 - Make QuerySet.bulk_create() 
populate fields on related models. (wontfix)
https://code.djangoproject.com/ticket/31541 - Improve documentation of 
django.contrib.redirects. (accepted)
https://code.djangoproject.com/ticket/31542 - Simplify admin JavaScript 
with ES6 for … of syntax. (accepted)
https://code.djangoproject.com/ticket/31540 - A 404 error with “id-” in 
slug on multilingual website with Indonesian language. (invalid)
https://code.djangoproject.com/ticket/31547 - I find a bug in Django. 
(duplicate)
https://code.djangoproject.com/ticket/31544 - Document input/output 
capturing utils in django.test.utils (wontfix)
https://code.djangoproject.com/ticket/31549 - Wrong results when executing 
QuerySet.query. (invalid)
https://code.djangoproject.com/ticket/31550 - AssertionError raised by 
test_file_response method of ASGITest class. (needsinfo)
https://code.djangoproject.com/ticket/31551 - TypeError: _bulk_create() got 
an unexpected keyword argument 'ignore_conflicts'. (needsinfo)

*Reviewed/committed:*
https://github.com/django/django/pull/12750 - Refs #30372 -- Stopped 
watching built-in Django translation files by auto-reloader.
https://github.com/django/django/pull/12838 - Refs #30573 -- Rephrased "Of 
Course" and "Obvious(ly)" in documentation and comments.
https://github.com/django/django/pull/12855 - Fixed #31534 -- Deprecated 
django.conf.urls.url().
https://github.com/django/django/pull/12866 - Fixed #31542 -- Simplified 
admin JavaScript with "for … of" statements.
https://github.com/django/django/pull/12392 - Fixed #12990, Refs #27694 -- 
Added JSONField model field.
https://github.com/django/django/pull/12308 - Fixed #31157 -- Fixed 
displaying read-only JSONField values in admin.
https://github.com/django/django/pull/12869 - Fixed #31528 -- Added 
staticfiles checks to collectstatic management command.
https://github.com/django/django/pull/12877 - Fixed #31548 -- Fixed 
URLValidator crash on non-strings.

*Reviewed:*
https://github.com/django/django/pull/12860 - Fixed #31515 -- Made 
ASGIHandler dispatch lifecycle signals with thread sensitive.

*Authored:*
https://github.com/django/django/pull/12854 - Bootstrapped Django 3.2.
https://github.com/django/django/pull/12858 - Fixed #31358 -- Fixed 
Meta.ordering validation lookups that are not transforms.

Best regards,
Mariusz

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers  (Contributions to Django itself)" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-developers/1d8822fe-07af-4e36-bd94-543c627b19eb%40googlegroups.com.


Re: Generate JWTs with Django

2020-05-11 Thread Derek Adair

>
> Maybe we can update the docs to show how you you would might use some of 
> the signing primitives instead of JWTs, but this also sounds a bit 
> dangerous 🤷‍♂️ 
>

As someone hoodwinked into believing JWT was the way... I'd absolutely LOVE 
a clear and concise write up on how I might get my single page js apps to 
communicate securely with projects like Django Rest. 

Thanks for closing the door on JWT for me James.

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers  (Contributions to Django itself)" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-developers/adc7a8eb-6100-4639-af98-4bca9afaad0b%40googlegroups.com.


Re: Generate JWTs with Django

2020-05-11 Thread Dan Davis
The place where JWT begins to get useful and important is when federated
login capabilities end-up in your app. That sort of thing seems more
the domain of python-social-auth packages like social-auth-core and
social-auth-app-django.  Generating an authentication cookie doesn't
require JWT - Django already does that.

On Mon, May 11, 2020 at 9:37 AM Derek Adair  wrote:

> Maybe we can update the docs to show how you you would might use some of
>> the signing primitives instead of JWTs, but this also sounds a bit
>> dangerous 🤷‍♂️
>>
>
> As someone hoodwinked into believing JWT was the way... I'd absolutely
> LOVE a clear and concise write up on how I might get my single page js apps
> to communicate securely with projects like Django Rest.
>
> Thanks for closing the door on JWT for me James.
>
> --
> You received this message because you are subscribed to the Google Groups
> "Django developers (Contributions to Django itself)" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to django-developers+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/django-developers/adc7a8eb-6100-4639-af98-4bca9afaad0b%40googlegroups.com
> 
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers  (Contributions to Django itself)" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-developers/CAFzonYarnig9vCJAekv%3DsaKuMJ-jz755XgLd%2B4GKJ0cN5YSBnQ%40mail.gmail.com.