Fri Mar 29 18:14:30 GMT 2013 Duncan Coutts * Remove the basic html package pages from the core and candidate features Ignore-this: d1d21177dadd082d176d78130db247a2 M ./Distribution/Server/Features/Core.hs -39 +1 M ./Distribution/Server/Features/PackageCandidates.hs -20 +1 Sat Mar 30 08:50:03 GMT 2013 Duncan Coutts * Simplify Hook interface and remove a few unused feature hooks Ignore-this: 66d7b02693ae0ee3168ca4f98fcdd17e M ./Distribution/Server/Features/Core.hs -36 +22 M ./Distribution/Server/Features/DownloadCount.hs -1 +1 M ./Distribution/Server/Features/Html.hs -4 +4 M ./Distribution/Server/Features/NameSearch.hs -6 +6 M ./Distribution/Server/Features/PackageCandidates.hs -31 +22 M ./Distribution/Server/Features/PackageList.hs -9 +9 M ./Distribution/Server/Features/PreferredVersions.hs -7 +7 M ./Distribution/Server/Features/RecentPackages.hs -1 +1 M ./Distribution/Server/Features/Tags.hs -4 +4 M ./Distribution/Server/Features/Upload.hs -15 +3 M ./Distribution/Server/Features/Users.hs -19 +7 M ./Distribution/Server/Framework/Hook.hs -46 +15 Mon Apr 8 22:08:11 BST 2013 Duncan Coutts * Change http code for the legacy passwd auth failure Ignore-this: cd56b7525cfaac2d5bba8c30ea17a3f2 When someone tries to authenticate for a user account that has a legacy password, we previously returned 401 without any auth methods. It turns out that returning 401 in this case is a violation of the http spec because you must provide at least one auth method. So change it to use 403 Forbidden. M ./Distribution/Server/Features/LegacyPasswds.hs -1 +1 Mon Apr 8 22:13:44 BST 2013 Duncan Coutts * Fix name of template in user signup feature Ignore-this: 883829d860f59407c1a89a9dbf1b564a M ./Distribution/Server/Features/UserSignup.hs -1 +1 Mon Apr 8 22:14:51 BST 2013 Duncan Coutts * Do not offer http basic authentication Ignore-this: 47a9f1430c007f50f9a3549f24a29b04 We still accept it if the client offers it pre-emptively. M ./Distribution/Server/Framework/Auth.hs -10 +11