Too many questions.  I am a bit lost.

I have a simple client that relies on an HTTP 401 response from the TG
server to pop up an authentication box.  However, the TG 2.x
application automatically returns a login form (instead of a 401
response code).  Apparently, some default TG 2.x or default repoze.who
config is kicking in.  I don't know which one.

Q1) Where can I locate repoze related config in a  TG 2.x
installation.

Q2) If I were to write my own repoze.who plugin(s), I have to provide
a who.ini.  Does the custom who.ini have to specify config for all
repoze functionality?  Or can I simply provide entries for override?
If I have to provide an entire who.ini (which seems likely), how do I
ensure that my who.ini is not missing an item (considering that I am
not a repoze expert).

Q3) I wrote a challenger_decider plugin, but by the time that plugin
is invoked (at egress) the HTTP response code is already set to 302
(redirected to login form).

Q4) Should I be implementing a challenger plugin instead?

Q5) Should I be implementing a classifier plugin instead (and classify
the request as an API-Client (as opposed to browser)) to bypass the
friendly-form plugin?

Here is my previous (decayed) thread.
http://groups.google.com/group/turbogears/browse_thread/thread/749b4cd327868829

Thank you....

-- 
You received this message because you are subscribed to the Google Groups 
"TurboGears" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/turbogears?hl=en.

Reply via email to