Re: Auth and Auth - Dalius Dobravolskas - com.googlegroups.pylons-discuss

32 messages in com.googlegroups.pylons-discussRe: Auth and Auth

From	Sent On	Attachments
Yannick Gingras	27 Mar 2008 07:44
Ian Bicking	27 Mar 2008 09:01
Wolverine	27 Mar 2008 09:42
Eric Ongerth	27 Mar 2008 19:56
Dalius Dobravolskas	27 Mar 2008 23:01
Dalius Dobravolskas	27 Mar 2008 23:42
chrism	28 Mar 2008 09:38
chrism	28 Mar 2008 10:07
Chris AtLee	28 Mar 2008 11:04
Mike Orr	28 Mar 2008 13:48
Ian Bicking	28 Mar 2008 14:55
Jorge Vargas	28 Mar 2008 21:12
Mike Orr	28 Mar 2008 22:19
Wichert Akkerman	29 Mar 2008 03:44
lasizoillo	29 Mar 2008 07:50
Dalius Dobravolskas	29 Mar 2008 10:16
Dalius Dobravolskas	29 Mar 2008 10:27
Dalius Dobravolskas	29 Mar 2008 10:29
Dalius Dobravolskas	29 Mar 2008 10:35
mdoudoroff	29 Mar 2008 16:23
Mike Orr	29 Mar 2008 20:36
Ian Bicking	30 Mar 2008 11:56
Ross Vandegrift	30 Mar 2008 12:05
Ross Vandegrift	30 Mar 2008 12:08
Dalius Dobravolskas	30 Mar 2008 22:36
Dalius Dobravolskas	31 Mar 2008 04:21
Chris Shenton	31 Mar 2008 08:24
Mike Orr	31 Mar 2008 11:16
Dalius Dobravolskas	01 Apr 2008 13:16
Ian Bicking	01 Apr 2008 13:58
johnnyice	16 Apr 2008 08:38
Eric Ongerth	16 Apr 2008 18:27

Subject:	Re: Auth and Auth
From:	Dalius Dobravolskas (dali...@public.gmane.org)
Date:	03/29/2008 10:16:20 AM
List:	com.googlegroups.pylons-discuss

Jorge Vargas wrote:

this comes as a shock to me, I though authkit was defacto just like mako, SA,etc. I'm just starting to read up on authkit, and so far I though it only had outdated documentation, but the fact that noone has back it up as a good path in this thread makes me wonder if I'm doing the right thing. Could someone summarize or point to a summary of the common issues people have with authkit? as for repoze how ready are you? will I have to work of trunk?

I personally think that AuthKit is great peace of software but I just don't like some aspects of it:

1) OpenID handler is bad:

a) To make login expire after two days you must set that in two places. That's bad design.

b) I don't like the way AuthKit handles database with OpenID but I don't have better solution yet either :-(

c) There are problem with AuthKit OpenID handler you are not even aware yet about.

2) I don't like the idea that AuhtKit tries to display login and other pages itself (either through template or function call). OK - you can pass callback function but that's not solution for me either.

From other side AuthKit *authorization* side is just pure gold.

That's why I offer splitting AuthKit into independent parts.

Regards, Dalius