Fri Mar 29 18:14:30 GMT 2013 Duncan Coutts
* Remove the basic html package pages from the core and candidate features
Ignore-this: d1d21177dadd082d176d78130db247a2
M ./Distribution/Server/Features/Core.hs -39 +1
M ./Distribution/Server/Features/PackageCandidates.hs -20 +1
Sat Mar 30 08:50:03 GMT 2013 Duncan Coutts
* Simplify Hook interface and remove a few unused feature hooks
Ignore-this: 66d7b02693ae0ee3168ca4f98fcdd17e
M ./Distribution/Server/Features/Core.hs -36 +22
M ./Distribution/Server/Features/DownloadCount.hs -1 +1
M ./Distribution/Server/Features/Html.hs -4 +4
M ./Distribution/Server/Features/NameSearch.hs -6 +6
M ./Distribution/Server/Features/PackageCandidates.hs -31 +22
M ./Distribution/Server/Features/PackageList.hs -9 +9
M ./Distribution/Server/Features/PreferredVersions.hs -7 +7
M ./Distribution/Server/Features/RecentPackages.hs -1 +1
M ./Distribution/Server/Features/Tags.hs -4 +4
M ./Distribution/Server/Features/Upload.hs -15 +3
M ./Distribution/Server/Features/Users.hs -19 +7
M ./Distribution/Server/Framework/Hook.hs -46 +15
Mon Apr 8 22:08:11 BST 2013 Duncan Coutts
* Change http code for the legacy passwd auth failure
Ignore-this: cd56b7525cfaac2d5bba8c30ea17a3f2
When someone tries to authenticate for a user account that has a legacy
password, we previously returned 401 without any auth methods. It turns out
that returning 401 in this case is a violation of the http spec because you
must provide at least one auth method. So change it to use 403 Forbidden.
M ./Distribution/Server/Features/LegacyPasswds.hs -1 +1
Mon Apr 8 22:13:44 BST 2013 Duncan Coutts
* Fix name of template in user signup feature
Ignore-this: 883829d860f59407c1a89a9dbf1b564a
M ./Distribution/Server/Features/UserSignup.hs -1 +1
Mon Apr 8 22:14:51 BST 2013 Duncan Coutts
* Do not offer http basic authentication
Ignore-this: 47a9f1430c007f50f9a3549f24a29b04
We still accept it if the client offers it pre-emptively.
M ./Distribution/Server/Framework/Auth.hs -10 +11
