notebook/notebook/auth
Thomas Kluyver 61972480b9 Don't clear login cookie on requests without cookie
Clearing the secure cookie makes sense when it is invalid or expired,
but clearing it when it's not sent with a request can unexpectedly log
the user out.

I ran into this with misconstructed URLs which didn't incorporate
base_url. That was itself a bug, but the result of suddenly being
unauthenticated makes it harder to track down.

Closes gh-3365 (hopefully)
Possibly also relevant to gh-2396

I'm not sure why this seems to affect Firefox more than Chrome.
2018-02-27 13:33:12 +00:00
..
tests s/jupyter_notebook/notebook 2015-05-14 10:49:28 -07:00
__init__.py s/jupyter_notebook/notebook 2015-05-14 10:49:28 -07:00
__main__.py renamed manager.py to config_manager.py and added more docstrings 2017-12-08 14:50:13 +01:00
login.py Don't clear login cookie on requests without cookie 2018-02-27 13:33:12 +00:00
logout.py s/jupyter_notebook/notebook 2015-05-14 10:49:28 -07:00
security.py use a warning for failure to set file permissions 2017-01-03 14:50:56 +01:00