Questions tagged [repoze.who]

repoze.who is an identification and authentication framework for arbitrary WSGI applications. It can be used as WSGI middleware, or as an API from within a WSGI application.

repoze.who is an identification and authentication framework for arbitrary WSGI applications. It can be used as WSGI middleware, or as an API from within a WSGI application.

repoze.who is inspired by Zope 2’s Pluggable Authentication Service (PAS) (but repoze.who is not dependent on Zope in any way; it is useful for any WSGI application). It provides no facility for authorization (ensuring whether a user can or cannot perform the operation implied by the request). This is considered to be the domain of the WSGI application.

It attempts to reuse implementations from paste.auth for some of its functionality.

20 questions
5
votes
2 answers

Is pyramid_who (repoze.who) the preferred way to do authentication for pyramid?

I am just starting to learn Pyramid Framework. Is pyramid_who (repoze.who) the preferred way to do authentication? What other options do I have?
sasker
  • 2,221
  • 2
  • 21
  • 26
4
votes
1 answer

How do I log a user in using repoze.who?

I have a working repoze.who/what setup (on a Pylons app). I now want to automatically log new users in after signup, without them having to use the login form. I've browsed the repoze.who docs and source code and, maybe I'm just missing it, but I…
Jason S
  • 13,538
  • 2
  • 37
  • 42
4
votes
1 answer

Python authentication/authorization framework

I'm developing a REST API in python with tornado and I'm going to implement the authentication and authorization, trying to avoid lock-in to other big projects i.e django. I'm looking around through forums and SO too and I've fond a solution that…
0x41ndrea
  • 385
  • 5
  • 23
4
votes
2 answers

How do I handle logouts with repoze.who (and bottle.py)?

I'm trying to make bottle.py work with repoze.who, and so far have managed to put together the following very simplistic program to get it working, using a combination of various examples I've found. Obviously this isn't something I'd run in…
paul88888
  • 336
  • 5
  • 13
3
votes
1 answer

Turbogears change user via function calls

In TG1, you could change the logged in user by doing something like: identity.set_current_identity(identity) Is it possible to do something similar in TG2? It seems like repoze.who should provide something similar, but I can't seem to find the…
Clarus
  • 2,259
  • 16
  • 27
1
vote
0 answers

Python WSGI Repoze.who basic Auth not asking for user and password

i'm tryng to use repoze.who for authentincation into wsgi apache Python 3.8 apt-get -y install python3 libexpat1 apache2 apache2-utils ssl-cert libapache2-mod-wsgi-py3 I've configured apache: nano…
1
vote
3 answers

login through XHR

i want to modify authentication behaviour so that the whole process can be done on the client side through xhr. so for example when i sumbit the login form login_handler would return a some json data on success and error instead of loading up new…
rhyek
  • 1,790
  • 1
  • 19
  • 23
1
vote
1 answer

Deleting Pylons/Beaker session on logout

I'm trying to list online users of my Pylons app by analyzing Beaker's sessions directly from the sessionstore (type = sqla in my case). By "online user" I mean "session has been accessed in the last 30 minutes", and it works nicely. My current…
Joril
  • 19,961
  • 13
  • 71
  • 88
1
vote
1 answer

How Ruby's authlogic is compared to Python's repoze.what/who library?

I am trying to understand architecture of authlogic and repoze.what/who libraries but I could get the first level architectural definition. repoze packages seems to use the zope modules at some level.. Are there any equivalent or easier…
user90150
1
vote
1 answer

How can I return JSON output when repoze.who authentication fails?

I'm writing a repoze.who plugin and want to return JSON from the repoze.who authentication middleware and still controll the HTTP status code. How can this be done?
Martin Thorsen Ranang
  • 2,394
  • 1
  • 28
  • 43
1
vote
1 answer

Renaming TurboGears 2's Repoze Fields with TGAdmin

I've been working on renaming TurboGears 2's Repoze 'groups' field to 'roles' to free the namespace and db tables for other purposes. Also roles makes much more sense to me then groups because I have a strong Drupal background. Now I have found some…
William Chambers
  • 499
  • 2
  • 13
1
vote
1 answer

Python syntax checkers (Pylint, Prospector...) crashing with KeyError: 'repoze.who' when run from inside Vim

I'm having a problem with running pylint from inside vim (which you need to do if you are using the syntastic plugin). For example :!pylint --version crashes with this traceback: Traceback (most recent call last): …
Sean Hammond
  • 12,550
  • 5
  • 27
  • 35
1
vote
1 answer

Turbogears 2: authentication, password in different table, feedback when update

I'm using turbogears 2.2 for writing web application like it seems to be really powerful framework, however there are many blackboxes like authentication as I don't understand them well (repoze.who plugin here). Requirements User password has to be…
tomis
  • 1,884
  • 1
  • 15
  • 28
1
vote
1 answer

I cannot login to own ClueReleaseManager site

I have setup my own pypi server, using the ClueReleaseManager framework, and I defined a user (for testing purposes only) as follows: cluerelmgr-admin updateuser test test test@localhost Then I started the server with cluerelmgr-server -p…
Alex
  • 41,580
  • 88
  • 260
  • 469
1
vote
1 answer

CKAN: Bad password in web interface but REST API works?

I installed CKAN from the package then reconfigured it to serve only through Apache. Everything worked great at first, but now I can't log into the web interface. I can create a user, but they get an error: Login failed. Bad username or…
mattva01
  • 23
  • 5
1
2