-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 W dniu 13.10.2010 19:52, James Westby pisze: > On Wed, 13 Oct 2010 12:35:54 -0300, Guilherme Salgado <salg...@canonical.com> > wrote: >> I think we can use existing libraries (python-oauth and >> lazr.authentication) and follow the examples of Canonical django >> projects that support OAuth, to support OAuth on launch-control. >> However, given that the deadline is very close, the alternative you >> propose above might be acceptable if the API is served over HTTPS. > > lazr.authentication is fairly nice, but also fairly minimal. What is > missing from the combination of python-oauth and lazr.authentication is > the models for storing tokens etc. via the Django ORM. > > We could extract those parts from canonical-identity-provider in to a > new app, which would be of use to everyone that wants to do this. > > What I like about the lazr.authentication solution is that it integrates > with the Django auth system in that you just get a request.user that you > can check as you like. Plain django-oauth and django-piston don't seem > to have that, and I'd like to keep that separation of concerns if > possible. > > I think that given that most of the code for the lazr.authentication > based solution already exists we could deliver something by Tuesday, but > we still don't have an answer to the question of external dependencies.
If we work together we might do that. Don't worry about external dependencies yet. If it works we'll worry about solving that problem. > Zygmunt, have you discussed that question with Spike? Does anyone else > know what IS would prefer there? No but that's a good idea. I'll talk with him about this today. Thanks ZK -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJMtreHAAoJEKkR4hQBRI+liZAIAMInd8ClTX6NB7LJS+3nDM52 WHkKEvRCCGWft/xWeib7NTMyaOW6xJD4rWBc6nFYjn4HByjo+Y/v8gxJHtN6e2TA UjRzn0OEG1Twz17emvfnx/SzoP3VtpFfUIGEYlyRjbyDR2gZc1o3C1hOwgon9cs+ 27gimWPP2sxyD7v7uxNb8hnhhR7R1v9STInohQkYp+wdYrQNFRgpLY0QllvNFzqC xg1/ewbWwplkotzLRWuLlTocuqIpYTZbAcFZHMS+Mvfc3F019FwIwOysLJSdNk/s 8v3JBzjn5Nm17nB50Gyvu/YVcxg2Ubpuv4W27xPlsLEN6v0cK790XTA4wIvBYYk= =P9pt -----END PGP SIGNATURE----- _______________________________________________ linaro-dev mailing list linaro-dev@lists.linaro.org http://lists.linaro.org/mailman/listinfo/linaro-dev
