requirements.txt

bleach==1.4.2
Flask==0.10.1
Flask-Script==2.0.5
Flask-Migrate==1.3.1
Flask-SQLAlchemy==2.0
psycopg2==2.6.1
SQLAlchemy==1.0.5
SQLAlchemy-Utils==0.30.5
PyJWT==1.4.0
marshmallow==2.4.2
marshmallow-sqlalchemy==0.8.0
flask-marshmallow==0.6.2
Flask-Bcrypt==0.6.2
credstash==1.8.0
boto3==1.2.3
boto==2.39.0
celery==3.1.20
twilio==4.6.0
monotonic==0.3


git+https://github.com/alphagov/notifications-python-client.git@0.5.0#egg=notifications-python-client==0.5.0


git+https://github.com/alphagov/notifications-utils.git@5.1.0#egg=notifications-utils==5.1.0
Strip HTML from template content Templates are created in the admin app and persisted in the API. They are consumed: - in the admin app, by requesting them from the API - in the API, by loading them from the database There are two potential places where unescaped HTML could be sent to a user: - when the admin app is previewing a template (it has to render the template as markup in order to show the placeholders) - in the body of an email For all consumers to have confidence that the templates are safe, it makes sense to santitise them at the point of creation (and modification). This also avoids any performance issues that could come from doing it at the point of requesting a template. In the future they could be created by a direct API call, bypassing the admin app. Therefore it makes sense for the API to sanitise them. The commit sanitises templates using a Mozilla’s Bleach library[1]. It is configured to get the text content of the template, minus any HTML tags. It is not using a regex because[2]. 1. https://github.com/mozilla/bleach 2. http://stackoverflow.com/questions/1732348/regex-match-open-tags-except-xhtml-self-contained-tags/1732454#1732454 2016-03-04 07:03:15 +00:00			`bleach==1.4.2`
Initial version of the notify-notifications-api 2015-11-18 17:02:25 +00:00			`Flask==0.10.1`
Implement a JWT header into base client - adds a base client - adds a notifications client These do not proxy onto genuine methods. This pull request is the basic implication of the API Client. Still needs a few things before is ready, notably proper logging and actual API endpoints to hook into. Basic premise is to deliver the JWT tokens required for Notify API authentication so we can discuss the implementation/premise. 2015-12-11 16:57:00 +00:00			`Flask-Script==2.0.5`
Initial code added for models and services not functional yet. Bootstrap and migrations added for db. 2016-01-07 17:31:17 +00:00			`Flask-Migrate==1.3.1`
			`Flask-SQLAlchemy==2.0`
			`psycopg2==2.6.1`
			`SQLAlchemy==1.0.5`
			`SQLAlchemy-Utils==0.30.5`
Implement a JWT header into base client - adds a base client - adds a notifications client These do not proxy onto genuine methods. This pull request is the basic implication of the API Client. Still needs a few things before is ready, notably proper logging and actual API endpoints to hook into. Basic premise is to deliver the JWT tokens required for Notify API authentication so we can discuss the implementation/premise. 2015-12-11 16:57:00 +00:00			`PyJWT==1.4.0`
Work in progress, skeleton of the api created and testing started. Need to fix authentication tests. 2016-01-08 17:51:46 +00:00			`marshmallow==2.4.2`
			`marshmallow-sqlalchemy==0.8.0`
Service and User API added, working with tests. Still need to polish the edges and add more tests. 2016-01-11 15:07:13 +00:00			`flask-marshmallow==0.6.2`
Add rest of user model fields to api. First step to moving user interactions to api. 2016-01-19 11:38:29 +00:00			`Flask-Bcrypt==0.6.2`
Added AWS files to - upgrade database - use credstash for secret overrides 2016-01-19 14:50:42 +00:00			`credstash==1.8.0`
Add sms notifications from a service to a queue. 2016-01-27 17:42:05 +00:00			`boto3==1.2.3`
Adding boto for python2 as Celery seems to need it. 2016-02-17 14:03:40 +00:00			`boto==2.39.0`
Celery tests 2016-02-09 13:31:45 +00:00			`celery==3.1.20`
Made SMS messages go through celery - twilio client pulled in from delivery app - made method to perform task 2016-02-15 16:01:14 +00:00			`twilio==4.6.0`
Add logging around 3rd party delivery calls - time SES, Twilio, fire text calls - use monotonic for accuracy 2016-03-02 09:33:20 +00:00			`monotonic==0.3`
Made SMS messages go through celery - twilio client pulled in from delivery app - made method to perform task 2016-02-15 16:01:14 +00:00
Added python client to dependencies 2015-12-14 12:58:49 +00:00
Use the new version of the notifications-python-client. This version no longer adds the req and pay to the claims of the jwt. The change is backward compatible so an older client that sends a jwt with the extra claims will pass authentication. Once all the clients have been updated to not include the extra claims some updates to exclude them from the method signatures will happen as well. 2016-04-14 18:12:33 +01:00			`git+https://github.com/alphagov/notifications-python-client.git@0.5.0#egg=notifications-python-client==0.5.0`

Added logging from notifications-utils. 2016-01-07 13:28:56 +00:00
Message limit added and all tests passing. 2016-04-29 10:36:59 +01:00			`git+https://github.com/alphagov/notifications-utils.git@5.1.0#egg=notifications-utils==5.1.0`