Thanks Roland for the very clear explanation! I'll look at the custom
message and if I read you correctly a matching IPython extension to consume
it. For the auth, to begin with I was going to check on the logged_in
status on the IPythonHandler, or I think I saw a tornado decorator. Anyway
still experimenting at this point.

Claude


On Mon, Oct 22, 2018 at 4:35 AM Roland Weber <[email protected]> wrote:

> Hello Claude,
>
> the notebook server and the kernel where your code cells execute are two
> different processes. The notebook server cannot directly update the
> variables in your kernel.
>
> You could translate the variable definitions received in your POST request
> to code, and send that code for execution to the kernel. Or you could
> define a custom message that the notebook server sends to the kernel, and
> install some handler code in the kernel that interprets these messages. The
> second approach has the advantage that you don't need language-specific
> logic in the notebook server.
> https://jupyter-client.readthedocs.io/en/stable/messaging.html
>
> Either way, allowing an external server to send POST requests that change
> the state of kernel processes sounds like an attack vector. Please be very
> careful to properly authenticate these requests.
>
> hope this helps,
>   Roland
>
> --
> You received this message because you are subscribed to the Google Groups
> "Project Jupyter" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To post to this group, send email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/jupyter/d779575f-bd24-4e14-a235-01a8606d2ce6%40googlegroups.com
> <https://groups.google.com/d/msgid/jupyter/d779575f-bd24-4e14-a235-01a8606d2ce6%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Project Jupyter" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jupyter/CAD3Hz1Gj3tS3q59Q4WiV4QYULbGC1x95QAuEtKHzXd7d8t5K1A%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to