> On Jul 26, 2019, at 11:14, Jens Troeger <[email protected]> wrote: > > Thanks! > > Christian, the social-app-pyramid > <https://github.com/python-social-auth/social-app-pyramid> package doesn’t > seem to be maintained anymore (last updated Feb 2017), so that makes me a > little nervous. > > Michael, requests-oauthlib <https://github.com/requests/requests-oauthlib> > looks good, but there’s still the Pyramid integration that I would need to > add.
This is something you are going to run in with whatever package you end up using. Unlike Django where everything is set in stone and it is easy for addons to change a small thing, you are going to have to do some of the integration work yourself in Pyramid because of its flexibility. requests-oauthlib is dead simple to use, and integration is as simple as following it's instructions on how to integrate it into your views. Steps are: 1. User visits login page and clicks button 2. User is redirected to oauth provider 3. <outside of your scope of your webapp> 4. User gets redirect back to your app (hopefully successfully) with a code 5. Using request-oauthlib exchange code for an access token and refresh token 6. Store the tokens/use them to access the API's, or if this is for authentication only don't even store the tokens 7. Party Supporting multiple auth providers isn't that difficult either with requests-oauthlib, needs some extra glue code that isn't written for you, but you can keep an array of parameters and depending on the button the user clicks on the login page you substitute in the appropriate auth provider information. > > Regarding Pyramid and OAuth2, there are a few projects, e.g. > pyramid_oauth2_provider > <https://github.com/elliotpeele/pyramid_oauth2_provider> (last updated Jun > 2017), pyramid_oauth2_client > <https://github.com/hathawsh/pyramid_oauth2_client> (last updated Feb 2012), > pyramid-oauthlib <https://github.com/tilgovi/pyramid-oauthlib> (last updated > Jun 2019). Other projects like apex <https://github.com/cd34/apex> seem also > unmaintained. Then there is pyramid_fullauth > <https://github.com/fizyk/pyramid_fullauth> (last updated Mar 2019) which > seems to support an interface to use auth with other providers but I can’t > quite tell if they’re built in. > > Considering that I’m currently using Velruse > <https://github.com/bbangert/velruse/> and need to move on, are there any > recommendations from the community regarding Pyramid and OAuth2 to simplify > talking with auth providers (e.g. Google, Live, etc.)? Bert JW Regeer -- You received this message because you are subscribed to the Google Groups "pylons-discuss" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/pylons-discuss/E2C95A72-9D7C-4B80-BC3A-B133D3BAE0E8%400x58.com.
