Re: [Twisted-Python] Fitting cred into my application

2012-09-24 Thread Matthew Pounsett
On 2012/09/24, at 16:36, exar...@twistedmatrix.com wrote: > As soon as you have a proxy between your client and server, you'll > regret this. The HTTP authentication standards specifically forbid this > style of authentication, and the proxy standards explicitly allow the > lifetime of connec

Re: [Twisted-Python] Fitting cred into my application

2012-09-24 Thread exarkun
On 08:17 pm, m...@conundrum.com wrote: > >On 2012/09/23, at 18:55, Itamar Turner-Trauring wrote: >>Attached find an example server, and a client demonstration - it's >>only very lightly tested, so likely wrong or buggy somewhere. I didn't >>bother to implement sessions, so you need to login with

Re: [Twisted-Python] Fitting cred into my application

2012-09-24 Thread Matthew Pounsett
On 2012/09/23, at 18:55, Itamar Turner-Trauring wrote: > Attached find an example server, and a client demonstration - it's only very > lightly tested, so likely wrong or buggy somewhere. I didn't bother to > implement sessions, so you need to login with every command if you want > extended ac

Re: [Twisted-Python] Fitting cred into my application

2012-09-23 Thread Itamar Turner-Trauring
Attached find an example server, and a client demonstration - it's only very lightly tested, so likely wrong or buggy somewhere. I didn't bother to implement sessions, so you need to login with every command if you want extended access. -- Itamar Turner-Trauring, Future Foundries LLC http://futur

Re: [Twisted-Python] Fitting cred into my application

2012-09-23 Thread Itamar Turner-Trauring
On Sat, Sep 22, 2012 at 11:41 PM, Matthew Pounsett wrote: > It seems to me #1 is overkill; if I want to have methods that don't > require authentication (e.g. methods for registering a user in the first > place), why would I require all clients to authenticate as anonymous before > using them? I

Re: [Twisted-Python] Fitting cred into my application

2012-09-22 Thread Matthew Pounsett
On 2012/09/22, at 21:36, Itamar Turner-Trauring wrote: > There's three parts to doing this: > > 1. When setting up the portal, in addition to the credential checker > that knows about regular users, also register a > twisted.cred.checkers.AllowAnonymousAccess. > 2. When you have no crede

Re: [Twisted-Python] Fitting cred into my application

2012-09-22 Thread Itamar Turner-Trauring
On Sat, Sep 22, 2012 at 4:37 PM, Matthew Pounsett wrote: > Hi. I've been trying to wrap my head around the cred implementation for a > while now, but either I'm missing something, or there's some piece of > documentation that could be better. Probably at least a bit of both. > > My application i

[Twisted-Python] Fitting cred into my application

2012-09-22 Thread Matthew Pounsett
Hi. I've been trying to wrap my head around the cred implementation for a while now, but either I'm missing something, or there's some piece of documentation that could be better. Probably at least a bit of both. My application is an XMLRPC server, and an authenticated client should have righ