-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 21 Apr 2010, at 19:51, BenH wrote:
I'm another newbie to Pylons and I hoping the community can give me some tips.
Bearing in mind that free advice is generally worth less than you pay for it ...
What would the community suggest I do to provide auth'n'auth to a rest interface?
Without even a rough spec of what your requirements are (OpenID? LDAP?, legacy db?) that's a tough call and a well-fitting shape can be quite application-specific.
If I understand WSGI this could be done on middleware leaving the app relatively clean.
There's very little clutter from app-level authentication.
I've seen postings about shabti and read parts of the Pylon cookbook but I'm hoping for some advice before diving in.
The Shabti templates can be treated merely as (patchily) worked examples of some different approaches and implementations:
1) a very basic auth'n'auth migrated over from Ben's original Tesla code, with the identity model variously expressed in elixir, declarativeBase, vanilla SQLA, CouchDB and RDF;
2) all the crispy repoze goodness of: repoze.who (authentication), repoze.what (auth'n'auth) and repoze.pylons (Gustavo Narea's Pylons- tailored who/what setup)
3) a SQLAlchemy-based adaptation of the RESTful Kai (PylonsHQ) user- managed accounts and auth'n'auth, again written by Ben Bangert and offering OpenID.
And, as you already know, the wiki has some ideas to check against the templates:
http://wiki.pylonshq.com/display/pylonscookbook/A+Spec+for+Pylons+Auth+Packages HTH. - -- Cheers, Graham http://www.linkedin.com/in/ghiggins -----BEGIN PGP SIGNATURE----- iEYEARECAAYFAkvSXbwACgkQOsmLt1NhivzJZgCg+0BL1VfbK36FEMv70okgipZ1 BOwAoLERYfqjwrI5K5b6zIWxny/UbD1XiQCVAgUBS9JdvFnrWVZ7aXD1AQKv/QP/ XpJwEl/oBZcGyRW/jSaaEg7ZGs2/NHI465m2HnslpD8vmF7s3X6y2gJ2NTAlL8Eo 8Vl6+M/phajmcsxFot6H0hyraO2ic1z2p7bWq/PQdUtJEGr1o/Aiu2KNT2eECgIZ 2++usuZAB1/pcnAdOTiXFsQslU1HFFSWXvZgn3WZ5ro= =Sq3Y -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "pylons-discuss" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/pylons-discuss?hl=en.
