Bump pytest-cov from 2.10.1 to 2.11.1

Bumps [pytest-cov](https://github.com/pytest-dev/pytest-cov) from 2.10.1 to 2.11.1.
- [Release notes](https://github.com/pytest-dev/pytest-cov/releases)
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest-cov/compare/v2.10.1...v2.11.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

.travis.yml

@@ -2,7 +2,7 @@ language: python
 python:
   - 3.5
   - 3.6
-  - 3.7-dev
+  - 3.7
   - nightly
 
 matrix:
@@ -21,11 +21,6 @@ script:
 after_success:
 - codecov
 
-env:
-  matrix:
-  - PYTHONASYNCIODEBUG=x
-  - PYTHONASYNCIODEBUG=
-
 deploy:
   provider: pypi
   user: aio-libs-bot
@@ -35,5 +30,4 @@ deploy:
   on:
     tags: true
     all_branches: true
-    python: 3.6
+    python: 3.7
-    condition: $PYTHONASYNCIODEBUG = ""

CHANGES.txt

@@ -1,6 +1,14 @@
 Changes
 =======
 
+0.4.0 (2018-09-27)
+------------------
+
+- Bump minimal supported ``aiohttp`` version to 3.2
+
+- Use ``request.config_dict`` for accessing ``jinja2`` environment. It
+  allows to reuse jinja rendering engine from parent application.
+
 0.3.0 (2018-09-06)
 ------------------
 

README.rst

@@ -1,7 +1,7 @@
 aiohttp_security
 ================
-.. image:: https://travis-ci.org/aio-libs/aiohttp-security.svg?branch=master
+.. image:: https://travis-ci.com/aio-libs/aiohttp-security.svg?branch=master
-    :target: https://travis-ci.org/aio-libs/aiohttp-security
+    :target: https://travis-ci.com/aio-libs/aiohttp-security
 .. image:: https://codecov.io/github/aio-libs/aiohttp-security/coverage.svg?branch=master
     :target: https://codecov.io/github/aio-libs/aiohttp-security
 .. image:: https://readthedocs.org/projects/aiohttp-security/badge/?version=latest

aiohttp_security/__init__.py

@@ -6,7 +6,7 @@ from .cookies_identity import CookiesIdentityPolicy
 from .session_identity import SessionIdentityPolicy
 from .jwt_identity import JWTIdentityPolicy
 
-__version__ = '0.3.0'
+__version__ = '0.4.0'
 
 
 __all__ = ('AbstractIdentityPolicy', 'AbstractAuthorizationPolicy',

aiohttp_security/api.py

@@ -19,7 +19,7 @@ async def remember(request, response, identity, **kwargs):
     """
     assert isinstance(identity, str), identity
     assert identity
-    identity_policy = request.app.get(IDENTITY_KEY)
+    identity_policy = request.config_dict.get(IDENTITY_KEY)
     if identity_policy is None:
         text = ("Security subsystem is not initialized, "
                 "call aiohttp_security.setup(...) first")
@@ -36,7 +36,7 @@ async def forget(request, response):
     Usually it clears cookie or server-side storage to forget user
     session.
     """
-    identity_policy = request.app.get(IDENTITY_KEY)
+    identity_policy = request.config_dict.get(IDENTITY_KEY)
     if identity_policy is None:
         text = ("Security subsystem is not initialized, "
                 "call aiohttp_security.setup(...) first")
@@ -48,8 +48,8 @@ async def forget(request, response):
 
 
 async def authorized_userid(request):
-    identity_policy = request.app.get(IDENTITY_KEY)
+    identity_policy = request.config_dict.get(IDENTITY_KEY)
-    autz_policy = request.app.get(AUTZ_KEY)
+    autz_policy = request.config_dict.get(AUTZ_KEY)
     if identity_policy is None or autz_policy is None:
         return None
     identity = await identity_policy.identify(request)
@@ -62,8 +62,8 @@ async def authorized_userid(request):
 async def permits(request, permission, context=None):
     assert isinstance(permission, (str, enum.Enum)), permission
     assert permission
-    identity_policy = request.app.get(IDENTITY_KEY)
+    identity_policy = request.config_dict.get(IDENTITY_KEY)
-    autz_policy = request.app.get(AUTZ_KEY)
+    autz_policy = request.config_dict.get(AUTZ_KEY)
     if identity_policy is None or autz_policy is None:
         return True
     identity = await identity_policy.identify(request)
@@ -78,7 +78,7 @@ async def is_anonymous(request):
     User is considered anonymous if there is not identity
     in request.
     """
-    identity_policy = request.app.get(IDENTITY_KEY)
+    identity_policy = request.config_dict.get(IDENTITY_KEY)
     if identity_policy is None:
         return True
     identity = await identity_policy.identify(request)

demo/database_auth/db_auth.py

@@ -57,6 +57,6 @@ async def check_credentials(db_engine, username, password):
         ret = await conn.execute(query)
         user = await ret.fetchone()
         if user is not None:
-            hash = user[2]
+            hashed = user[2]
-            return sha256_crypt.verify(password, hash)
+            return sha256_crypt.verify(password, hashed)
     return False

docs/example_db_auth.rst

@@ -53,7 +53,7 @@ Now you have two tables:
 +-----------------+
 | user_id         |
 +-----------------+
-| permission_name |
+| perm_name       |
 +-----------------+
 
 

requirements-dev.txt

@@ -1,18 +1,18 @@
 -e .
-flake8==3.5.0
+flake8==3.8.4
-async-timeout==3.0
+async-timeout==3.0.1
-pytest==3.7.4
+pytest==6.2.1
-pytest-cov==2.5.1
+pytest-cov==2.11.1
-pytest-mock==1.10.0
+pytest-mock==3.4.0
-coverage==4.5.1
+coverage==5.3.1
-sphinx==1.7.8
+sphinx==3.4.1
 pep257==0.7.0
-aiohttp-session==2.5.1
+aiohttp-session==2.9.0
-aiopg[sa]==0.15.0
+aiopg[sa]==1.1.0
-aioredis==1.1.0
+aioredis==1.3.1
-hiredis==0.2.0
+hiredis==1.1.0
-passlib==1.7.1
+passlib==1.7.4
-cryptography==2.3.1
+cryptography==3.3.1
-aiohttp==3.4.2
+aiohttp==3.7.3
 pytest-aiohttp==0.3.0
-pyjwt==1.6.4
+pyjwt==1.7.1

setup.py

@@ -27,7 +27,7 @@ def read(f):
     return open(os.path.join(os.path.dirname(__file__), f)).read().strip()
 
 
-install_requires = ['aiohttp>=3.0.0']
+install_requires = ['aiohttp>=3.2.0']
 tests_require = install_requires + ['pytest']
 extras_require = {'session': 'aiohttp-session'}
 
@@ -43,6 +43,7 @@ setup(name='aiohttp-security',
           'Programming Language :: Python :: 3',
           'Programming Language :: Python :: 3.5',
           'Programming Language :: Python :: 3.6',
+          'Programming Language :: Python :: 3.7',
           'Topic :: Internet :: WWW/HTTP',
           'Framework :: AsyncIO',
       ],