Re: AuthKit: support for encrypted passwords

2007-01-17 Thread Robert Sayre
On 1/17/07, James Gardner [EMAIL PROTECTED] wrote: Hi Josh, It does HTTP digest authentication. What exactly did you have in mind? Perhaps he means authentication that works with simple forms or basic, but stores the password as sha1(salt + password). The credential would then be stored as

how to build a portlet style site?

2007-01-17 Thread Paul J Stevens
Hi all, coming from the world of plone... All the example code uses a single controller per page, which is all good and fine for crud operations on a database, but seems rather limited for what we do. I'd like to build a website (read a typical portal site) that brings together several

Re: how to build a portlet style site?

2007-01-17 Thread James Gardner
Hi Paul, I'm developing a new templating system called art which handles this particular case. Instead of using a controller to call a template and display the result, the template effectively defines which content it requires and calls the different controllers (called plugins in art)

Re: how to build a portlet style site?

2007-01-17 Thread climbus
In our projects we used components folder where we put functions like: def pool(id): c.pool = model.Pools.get(id) return render('pool_template') in template with page we call pool(id) in somewhere we want. This is very flexible solution. We can decorate function with cache,

Re: session_context and multiple SA databases

2007-01-17 Thread Max Ischenko
You'll want to setup another session_context similar to how the main one is setup in pylons.database. For example, in one of your models modules: from paste.deploy import CONFIG from sqlalchemy.ext import sessioncontext from pylons.database import app_scope, make_session dburi2 =

Re: how to build a portlet style site?

2007-01-17 Thread Ian Bicking
Paul J Stevens wrote: All the example code uses a single controller per page, which is all good and fine for crud operations on a database, but seems rather limited for what we do. I'd like to build a website (read a typical portal site) that brings together several controllers/views into a

Re: session_context and multiple SA databases

2007-01-17 Thread Max Ischenko
Another issue. If I use DynamicMetadata, as recommended in QuickWiki tutorial, how am I supposed to connect it to correct session_context? Do I need to create engine explicitly (via create_engine) and then call meta.connect(engine)? If so, when this should happen? Max.

Response content as generator while debug = true? (Sending intermediate content)

2007-01-17 Thread Chas Emerick
Re: http://groups.google.com/group/pylons-discuss/browse_frm/thread/32f4a69cfc4a170f/ I would like to be able to yield intermediate content even when debug is on -- otherwise, testing is not pleasant (yes, I've been spoiled by the interactive stack traces, etc!). Is this possible? If not, I

Response content as generator while debug = true? (Sending intermediate content)

2007-01-17 Thread Chas Emerick
Re: http://groups.google.com/group/pylons-discuss/browse_frm/thread/32f4a69cfc4a170f As mentioned in the referenced post, a generator set as a Response's content (as of pylons 0.9.4.1) while debugging is on will be consumed entirely before any content is sent to the client. Is there any way to

Re: AuthKit: support for encrypted passwords

2007-01-17 Thread Josh Heitzman
Robert Sayre wrote: Perhaps he means authentication that works with simple forms or basic, but stores the password as sha1(salt + password). The credential would then be stored as username:salt:hexdigest This is fairly standard practice, and provides decent security for casual apps. It's

Re: session_context and multiple SA databases

2007-01-17 Thread Philip Jenvey
On Jan 17, 2007, at 6:19 AM, Max Ischenko wrote: It works, at least if I verify with paster shell. But I tried to write a simple test to assert this behavior and got a strange error: File /home/max/projects/dou-trunk/site/doupy/doupy/tests/functional/ test_db_conn.py, line 2, in ?

Re: Response content as generator while debug = true? (Sending intermediate content)

2007-01-17 Thread Ben Bangert
On Jan 17, 2007, at 8:12 AM, Chas Emerick wrote: As mentioned in the referenced post, a generator set as a Response's content (as of pylons 0.9.4.1) while debugging is on will be consumed entirely before any content is sent to the client. Is there any way to get around this? I've gotten

Re: Authentication and Authorization Systems

2007-01-17 Thread Uwe Feldtmann
James Gardner wrote: [snip...] Here is a complete Pylons auth system using SQLAlchemy and OpenID to get you started: http://authkit.org/trac/browser/AuthKit/trunk/examples/pylons/AuthDemo I've looked at the above example and I was wondering why there appears to be 3 separate persistence

Re: Response content as generator while debug = true? (Sending intermediate content)

2007-01-17 Thread Chas Emerick
Yes, I can see the difficulties involved. However, the debugger being returned as the content that was requested when an error occurs is really just a convenience -- there's always the unique debug URL that is piped out to stdout as well. I'd be perfectly satisfied if pylons/paste/etc were to

Re: AuthKit: support for encrypted passwords

2007-01-17 Thread Josh Heitzman
I dug around a bit. What Unix systems used to was called crypt. Some are currently a salt + MD5, but apparently the better algorithm is considered to be bcrypt, which includes a 128-bit salt and uses are variable cycle encryption algorithm. A python implementation of bcrypt can be had here

formencode and unicode

2007-01-17 Thread David Smith
I brought this up with Alberto Valverde and Ian Bicking because I was using toscawidgets to provoke the problems, but there are issues with formencode that affect pylons' form handling as well so I will repeat them here. Alberto has fixed them by overriding the relevant formencode behavior inside

Re: Pylons website problems

2007-01-17 Thread Philip Jenvey
On Jan 15, 2007, at 7:06 PM, Brian Granger wrote: Hi, We are evaluating using Pylons for some Python web app development. We have had some trouble with the tutorials: 1. When going through some of the tutorials, some of the code examples are not being displayed correctly. Because

Re: Pylons website problems

2007-01-17 Thread Brian Granger
Thanks! On Jan 17, 8:02 pm, Philip Jenvey [EMAIL PROTECTED] wrote: On Jan 15, 2007, at 7:06 PM, Brian Granger wrote: Hi, We are evaluating using Pylons for some Python web app development. We have had some trouble with the tutorials: 1. When going through some of the tutorials,

Re: how to build a portlet style site?

2007-01-17 Thread Uwe Feldtmann
James Gardner wrote: I'm developing a new templating system called art which handles this particular case. Instead of using a controller to call a template and display the result, the template effectively defines which content it requires and calls the different controllers (called plugins in