Hello, Mike,

> By "component programming" you mean the fact that it has plugins?
Almost.

> So by "component programming" you mean plugins?  And that's your main
> complaint against repoze.who?
Actually if we speak about repoze.who against AuthKit in this case, my
main complaint is that repoze.who creates its own way of creating
plugins. While AuthKit's plugins are simple middlewares. I see it as
additional and unnecessary complexity.

> But the question will become, how easy is it to switch from one 
> authentication method to another?
It will work only as far as some standard/specification is followed.
In this case handling 401 status. HTTP protocol and WSGI adds it's own
limitations here. There is no need to invent bicycle here. Here it is
in front of you "401".

That means - change middleware and that's all. OK, that was simplistic
approach to real world. E.g. in real world form authentication is only
for registered users, OpenID for everyone but might require additional
registration step. That means it is not enough just to replace
middleware or change configuration. repoze.who is not helping us here.

> Will the middlewares all have a consistent configuration or will they start 
> to diverge?
That's not really important. There is only small number of common
configuration options between different authentication methods. Again
WSGI and Pylons adds some restrictions here that does not allow to
diverge too much.

> What if you need to combine multiple authentication schemes in the same site?
You can add multiple middlewares. The problem is when middlewares or
plugins conflict with each other (e.g. because of lack of options).
repoze.who does not help to solve this problem.

> This consistency and combinability is what make plugin systems so attractive:
Middlewares are plugins as well. OK I repeat myself.

In the end, the interesting thing that because of WSGI limitations you
can combine AuthKit, repoze.who or my plugins even today.

-- 
Dalius
http://blog.sandbox.lt

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"pylons-discuss" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/pylons-discuss?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to