Hello, Mike, > By "component programming" you mean the fact that it has plugins? Almost.
> So by "component programming" you mean plugins? And that's your main > complaint against repoze.who? Actually if we speak about repoze.who against AuthKit in this case, my main complaint is that repoze.who creates its own way of creating plugins. While AuthKit's plugins are simple middlewares. I see it as additional and unnecessary complexity. > But the question will become, how easy is it to switch from one > authentication method to another? It will work only as far as some standard/specification is followed. In this case handling 401 status. HTTP protocol and WSGI adds it's own limitations here. There is no need to invent bicycle here. Here it is in front of you "401". That means - change middleware and that's all. OK, that was simplistic approach to real world. E.g. in real world form authentication is only for registered users, OpenID for everyone but might require additional registration step. That means it is not enough just to replace middleware or change configuration. repoze.who is not helping us here. > Will the middlewares all have a consistent configuration or will they start > to diverge? That's not really important. There is only small number of common configuration options between different authentication methods. Again WSGI and Pylons adds some restrictions here that does not allow to diverge too much. > What if you need to combine multiple authentication schemes in the same site? You can add multiple middlewares. The problem is when middlewares or plugins conflict with each other (e.g. because of lack of options). repoze.who does not help to solve this problem. > This consistency and combinability is what make plugin systems so attractive: Middlewares are plugins as well. OK I repeat myself. In the end, the interesting thing that because of WSGI limitations you can combine AuthKit, repoze.who or my plugins even today. -- Dalius http://blog.sandbox.lt --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "pylons-discuss" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/pylons-discuss?hl=en -~----------~----~----~----~------~----~------~--~---
