On Feb 6, 2008 9:05 AM, Lee McFadden <[EMAIL PROTECTED]> wrote: > > On Feb 6, 2008 9:37 AM, Paul Johnston <[EMAIL PROTECTED]> wrote: > > > > We've already got instructions for using AuthKit with TG2, so some auth* > > solution is available already. Potential next steps are: > > > > We do? If you're talking about the page in the 2.0 RoughDocs > section[1] then I strongly disagree that we have instructions - that > page consists of some barely explained notes and doesn't actually show > how to use Authkit at all. > > [1]: http://docs.turbogears.org/2.0/RoughDocs/AuthKit > > > a) Making a TG1 identity compatible layer > > b) Create a wonderful, all-powerful new auth* API > > > > Thing is, I'm not sure (a) is that important, or that we're ready to do > (b) > > just yet. > > > > I would need to poke around with Authkit to actually have a good > opinion on this but from what I've read elsewhere Authkit is good for > authentication but annoyingly complex for authorization. Maybe a mix > and match approach would be better? > > I'm going to be starting a project with TG2 soon and auth/auth will be > required so I'm hoping I'll be able to contribute to this effort.
My preference is for b). Making authkit compatible with the TG Identity framework would be pretty tough, because it just won't do some things that Identity will. Or at least, it would be pretty ugly, and probably fragile. I was pretty impressed when I initially read about authkit, but am becoming less so, the more I find out. I had started some work on an auth layer about a month ago, but it got stalled due to the 2.4 incompatibilities which were introduced with the switch to WebOb (though those should be fixed now). I haven't had a chance to go back to it, as I'm pretty much slammed at least through this week. I probably just need to start over anyway. I'm really hoping to get some serious progress made on this during the sprint (and maybe before). Kevin Horn --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "TurboGears Trunk" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/turbogears-trunk?hl=en -~----------~----~----~----~------~----~------~--~---
