Re: [RFC PATCH] REST: enable token authentication

2017-05-30 Thread Stephen Finucane
On Tue, 2017-05-30 at 16:35 +1000, Andrew Donnellan wrote: > On 30/05/17 16:26, Russell Currey wrote: > > What exactly does BA get used for at the moment? > > REST requests that update status, e.g. sending a PATCH request on a  > patch to change status from "new" to "under-review", or something >

Re: [RFC PATCH] REST: enable token authentication

2017-05-30 Thread Andrew Donnellan
On 30/05/17 16:26, Russell Currey wrote: What exactly does BA get used for at the moment? REST requests that update status, e.g. sending a PATCH request on a patch to change status from "new" to "under-review", or something like that. -- Andrew Donnellan OzLabs, ADL Canberra

Re: [RFC PATCH] REST: enable token authentication

2017-05-30 Thread Russell Currey
On Thu, 2017-05-25 at 22:26 +0100, Stephen Finucane wrote: > On Thu, 2017-05-25 at 18:47 +1000, Andrew Donnellan wrote: > > Token authentication is generally viewed as a more secure option for > > API > > authentication than storing a username and password. > > > > Django REST Framework gives us

Re: [RFC PATCH] REST: enable token authentication

2017-05-26 Thread Philippe Pepiot
On 05/25/2017 10:47 AM, Andrew Donnellan wrote: > Token authentication is generally viewed as a more secure option for API > authentication than storing a username and password. > > Django REST Framework gives us a TokenAuthentication class and an authtoken > app that we can use to generate

Re: [RFC PATCH] REST: enable token authentication

2017-05-25 Thread Stephen Finucane
On Thu, 2017-05-25 at 18:47 +1000, Andrew Donnellan wrote: > Token authentication is generally viewed as a more secure option for > API > authentication than storing a username and password. > > Django REST Framework gives us a TokenAuthentication class and an > authtoken > app that we can use to

[RFC PATCH] REST: enable token authentication

2017-05-25 Thread Andrew Donnellan
Token authentication is generally viewed as a more secure option for API authentication than storing a username and password. Django REST Framework gives us a TokenAuthentication class and an authtoken app that we can use to generate random tokens and authenticate to API endpoints. Enable DRF's