Re: [web2py] Restful authentication and CORS

2014-08-10 Thread Christian Foster Howes
Albert, when we built our oauth implementation we build it ourselves on top of the python oauth2 lib. it's been a while since we built it so i can't remember if that web2py-oauth2 lib had not been written yet. we also are doing a slightly modified form of auth with our users - they start

Re: [web2py] Restful authentication and CORS

2014-08-05 Thread Albert Abril
Hi Christian, I'm trying to set up my app as a oauth2 provider too, did you use https://github.com/SamuelMarks/web2py-oauth2 , or another source? do you have any tutorials or documentation about it? I'll appreciate it so much. Cheers, Albert. On 29 May 2013 00:21, Christian Foster Howes

Re: [web2py] Restful authentication and CORS

2013-05-28 Thread Michele Comitini
REST is stateless so you should not rely on session, hence you can use auth.settings.allow_basic_login = True see here http://web2py.com/books/default/chapter/29/10#Access-Control for proper (as per RFC) authentication challenge with realm use: @auth.basich(basic_auth_real=True|any string) An

Re: [web2py] Restful authentication and CORS

2013-05-28 Thread Ruben D. Orduz
Yes, most REST patterns I've seen are handled either by http basic auth or else request signing. Either option requires handling that on each call. On Tue, May 28, 2013 at 4:54 AM, Michele Comitini michele.comit...@gmail.com wrote: REST is stateless so you should not rely on session, hence

Re: [web2py] Restful authentication and CORS

2013-05-28 Thread Christian Foster Howes
i have configured my system to be an oauth provider and added a decorator to all RESTful calls to validate the oauth signature. yes, i do this on each request that i require authentication for. On Tuesday, May 28, 2013 6:01:11 AM UTC-7, Ruben D. Orduz wrote: Yes, most REST patterns I've seen

Re: [web2py] Restful authentication and CORS

2013-05-27 Thread Ray (a.k.a. Iceberg)
Hi Alec, On Tuesday, July 17, 2012 1:03:04 AM UTC+8, Alec Taylor wrote: On Tue, Jul 17, 2012 at 2:20 AM, David Marko dma...@tiscali.czjavascript: wrote: +1 from me having this. Btw. On client side i'm using AngularJS and Trigger.io (instead of PhoneGap) I've been looking around, and

[web2py] Restful authentication and CORS

2012-07-16 Thread rdodev
I'm developing a web2py app that will be used as the back-end for a mobile app. The mobile app will be making API calls to the service for anything ranging from login/authentication to CRUD operations. The auth model that comes baked into web2py would suffice, except that it's not RESTful and

Re: [web2py] Restful authentication and CORS

2012-07-16 Thread Alec Taylor
Hi rdodev, I'm doing the exact same thing (well similar concept... using PhoneGap and remote auth, but using JSONRPC and OAuth2 instead of REST and regular auth) Keep an eye on this issue: http://code.google.com/p/web2py/issues/detail?id=872 When the dev's get the time they'll be adding in

Re: [web2py] Restful authentication and CORS

2012-07-16 Thread David Marko
+1 from me having this. Btw. On client side i'm using AngularJS and Trigger.io (instead of PhoneGap)

Re: [web2py] Restful authentication and CORS

2012-07-16 Thread Alec Taylor
On Tue, Jul 17, 2012 at 2:20 AM, David Marko dma...@tiscali.cz wrote: +1 from me having this. Btw. On client side i'm using AngularJS and Trigger.io (instead of PhoneGap) I've been looking around, and will have one of the following setups: - *AngularJS http://angularjs.org/* with

Re: [web2py] Restful authentication and CORS

2012-07-16 Thread Alec Taylor
On Tuesday, July 17, 2012 2:20:08 AM UTC+10, David Marko wrote: +1 from me having this. Btw. On client side i'm using AngularJS and Trigger.io (instead of PhoneGap) I've been looking around, and will have one of the following setups: - *AngularJS http://angularjs.org/* with