(cherry picked from commit 08cb566)

(cherry picked from commit e4905a5)

without blocking multiple concurrent sessions

also updates trace amounts of copy duplicated in tests between
edx-proctoring and edx-platform

JIRA:EDUCATOR-3931
(cherry picked from commit 673fb79)

(cherry picked from commit f7799ba)

JWKs are used for micro-frontends and OAuth scopes.  The Ironwood
installation process doesn't yet create the JWKs needed.  For Ironwood,
at least don't fail trying to use the empty settings.  By default,
micro-frontends and OAuth scopes will be unavailable.

Don't fail if the JWK settings aren't set

(cherry picked from commit 84f609a)

(cherry picked from commit 91ed450)

(cherry picked from commit 44ca4d4)

…ty-fix

update django wiki for ironwood release

(cherry picked from commit e0b0c37)

(cherry picked from commit a85256e)

(cherry picked from commit 12931ae)

(cherry picked from commit c5f396b)

This PR is based on openedx#19284 and is part of the
series of work related to the proposal openedx#18134.

This PR avoids the assignment of
anonymous/unenrolled users to any cohort when
course is public. Anonymous or unenrolled users
will only see content that does not have a
content group assigned.
The "View Course" link to the course outline
is shown on the course about page for a course
marked public/public outline.
It also makes course handouts available for
public courses (not for public_outline).
This PR also hides the different warnings and
messages asking the user to sign-in and enroll
in the course, when the course is marked public.
It modifies the default public_view text to
include the component display_name when
unenrolled access is not available.

Implement public cohort

Fix import error introduced by 7ee1173 cherry pick

Edit worker type in ironwood Jenkinsfiles

We've been running into OoM issues with this functionality while
executing on one of our smaller application servers.
- Sometimes this manifests by preventing the entire page from loading
  (exception during the GET).
- At others, it occurs using the `Delete course from site` functionality
  by breaking during the POST handler. This case is particularly
  frustrating because the course actually is deleted, but looks like it
  may not have been. Internally, this is because the 500 error occurs
  _after_ the course has been successfully deleted, though this is
  opaque to the end-user.

While this doesn't address the underlying memory issue,
it does at least allow the app to recover gracefully.

(cherry picked from commit 25be889)

This removes the portion of the CCX course names data migration
that triggers course publishing. While course publishing is the
desired behavior, doing so within the migration makes it so that
this migration is not practical to run if you have hundreds or
thousands of CCX courses (we run out of memory).

By doing the data migration without the accompanying course
publishes, this means that CCX course names will still show up
incorrectly for courses until there is an edit or publish of
either that CCX course or the underlying course that the CCX
course extends. But we at least set up the data so that it's
gradually self-correcting over time, and do so with little coding
effort or operational risk/weirdness.

A more comprehensive fix for this would involve:

* Fixing the memory leak around CourseOverviews creation and/or;
* Moving CourseOverview generation to happen asynchronously and/or;
* Being more careful about transactionality in the data migration
  and running it repeatedly until it all passes.

Full details of our migration issues are at:

https://github.com/edx/edx-platform/pull/18808#issuecomment-422930820
(cherry picked from commit 5f97cec)

…again

Fix ironwood ci pipelines

… been migrated to use production.py

…ettings_type_for_plugins

production.py should fallback to aws.py incase the plugin has not yet…

@skip_unless_master is used to skip tests because on named release
branches, most work happens leading up to the first release on the
branch, and that is before the docs have been published.  Tests that
check readthedocs for the right doc page will fail during this time, and
it's just a big distraction.  Also, if we bork the docs, it's not the
end of the world, and we can fix it easily, so this is a good tradeoff.

(cherry picked from commit 561f075)

…ests

Nedbat/ironwood skip help tests

Squashed from:

80b977f Make the studio login over the lms optional using a feature flag
14b4223 Addressing feedback
9195ec9 Addressing second feedback about redirect logic on logout behing feature flag
923a917 Fixing lettuce tests

(cherry picked from commit 6f91a0d9e8ea2364f58a2cd38e804ac57f8f416b)

Commit 6f91a0d9 was a squashed version of the four original commits, to
make resolving conflicts easier.

Currently, the LMS logout endpoint should iframe in the logout pages of
all the IDAs you were logged into. In short, this was made possible with
DOP because keeping track of the logout URIs and leaving a trail of
evidence in the user cookies was part of what we added in our fork of
DOP.  In the case of DOT, we don't have time or desire to fork DOT to
mirror this behavior, so our stop-gap solution is to log out the user
from a list of logout URIs in settings.

(cherry picked from commit 10afe5e)

I missed the LMS production settings, and Studio in its entirety.

(cherry picked from commit 11c3588)

…ate_report_data

Before this fix if an XBlock's generate_report_data method returned multiple
responses for the same user from a single user state, the report generator would
end up overwriting each response over the previous one such that only the last
response would be preserved.

(cherry picked from commit a76c6dc)

Make the studio login over the lms optional using a feature flag

Fix SSO Login when JWT_PRIVATE_SIGNING_JWK is not set

(cherry picked from commit 640ff4e)

Facebook emailed that edX doesn't comply with Platform Policy 8.3, also fixed
Google button according to their policy.

PROD-174

Fix Facebook and Google social auth buttons.

The course_listing.js view injects courses for search in
ul element containing class courses-listing. Removing this
class from journal and journal bundles will solve the problem

LEARNER-7210

(cherry picked from commit 14fdc28)

This reverts commit 25130ae.

Added a feature flag to disable honor mode certificates for
edx.org, by default set to false to allow honor mode certificates
for open community.

PROD-269

…onor-cert

Add feature flag to disable honor mode certificates.

(cherry picked from commit 7c6b49e)

Fix Elevation in permission over OAuth

* Bump completion to 1.0.3

Fixes authentication issue with mobile apps.

* Merge pull request openedx#19907 from edx/ormsbee/increment-dependencies

Update edx-platform dependencies -- pulled constraints.txt only

(cherry picked from commit 15b845a)

* Updates edx-platform dependencies

* Pins edx-proctoring versions to work with Ironwood

* Use edx-completion>=1.0.3,<2.0

Reverts previous changes, and restricts completion library to avoid
incompatibilities that may be introduced for 2.0+.

* Master uses completion 2.0.0

so use that here too

(cherry picked from commit cf2432c)

(cherry picked from commit a3baaf8)

(cherry picked from commit c60eee0)

* edX should be lowercase everywhere

* Studio is not a trademark

* Our trademarks are all registered trademarks

(cherry picked from commit 09690ce)

(cherry picked from commit 752b307)

fix xss issue for all dashboard redirect messages

(cherry picked from commit 70cd9f3)

PROD-401: Fix XSS vulnerability on certificates support page.

fix activation email for incorrect password

Changelog can be found here: https://matplotlib.org/1.5.3/users/whats_new.html

This version fixes the odd setup.py in matplotlib that tries to install
numpy as a part of matplotlib setup.py execution.

Looking at the changelog I don't see any incompatibility issues just bug
fixes and feature additions.

Patch Ironwood: Make CustomTagModule safe (remove Mako) [SEC-609]

social platform validation

…thorizenet_on_ironwood

changes required for authoriznet on ironwood

…nwood

add caliper_app_code_for_ironwood

…ail_for_contact_us_ironwood

add circle-ci test and zendesk replacement code for ironwood

… bug fixes found during caliper app

…nts_for_ironwood

add login logout events code and some other circleci changes and some…

… bug fixes found during caliper app

…icket

…endesk_ticket

send email instead of zendesk support

…ns_for_cms

add kafka and caliper settings for cms production.py

…a-settings

Refactor if conditions for caliper settings

…tead_zendesk

Improve Emails and remove extra code.

…11.6

update caliper version to 11.6

… unenroll (refund failure)