IRC log of #zope3-dev for Sunday, 2009-05-10

« Saturday, 2009-05-09 Index Monday, 2009-05-11 »
J1mmcdonc, ayt?00:19
mcdonchi J1m00:19
J1mhey00:19
J1mI'm trying to figure out repoze.who. :)00:19
mcdoncJ1m: darn. ;-)00:19
mcdoncwe're working on improvements to it this week... wish you had found it later ;-)00:20
J1mDoes the FormPlugin plugin have any provision for logging out?00:20
J1mOther than the app expring the cookie?00:21
J1mexpiring00:21
mcdoncit does... if the application returns a 401 Unauthorized, the credentials will be "forgotten" and the login form will be rediplspayed00:21
*** dunny has quit IRC00:21
J1mhm, not what I had in mind. :)00:21
J1mAny way that doesn't act like basic auth?00:21
*** redir has quit IRC00:21
mcdoncif you want to do that programmatically, you can use "headers = environ['repoze.who.plugins'][thepluginname].forget()" and return a response with those headers00:22
mcdoncerrr... i think forget actually takes some args00:22
mcdoncthis is the bit we're working on improving btw ;-)00:22
J1m:)00:22
*** redir has joined #zope3-dev00:23
J1mI've come to dislike having 401's cause a challenge.00:23
mcdoncthe next release will probably not require any "challenger" if you don't need on (and instead of returning a 401, you'd just actually return a login page)00:23
mcdonc(or a forbidden)00:23
mcdoncyeah me too i think... tres still likes it tho00:23
J1m401 seems apropriate when someone isn't authorized.00:23
mcdoncright00:23
J1mThere should be some other way to initiate a login.00:24
J1meven basic auth requires an extra header to get a challenge.00:24
*** JaRoel|4D has joined #zope3-dev00:24
mcdoncso i *think* how i'd like it to work is that initiating a login ("challenge") was not done by repoze.who, but instead by the app just returning some response00:25
mcdoncparticularly for non-single-signon systems00:25
mcdonci think that's somewhat distinct from logging them out, tho00:26
mcdonclogging them out needs headers of some kind usually, either set by the app or set by who itself as a result of catching some response (like 401)00:27
mcdonccurrently programmatic logout either requires obtaining those headers (badly) via the environ-supplied repoze.who.plugins dict or by redisplaying the login form by returning a 40100:28
mcdoncthe "challenge decider" lets you vary how you decide whether to show a challenge for a response, btw00:29
mcdonc /over00:29
J1mLeaving aside the desire of an app to control how a login form looks, I'd like a simple API for an app to cause a login or logout.00:29
J1mI really like the google app engine api:00:29
J1mhttp://code.google.com/appengine/docs/python/users/functions.html00:29
J1mespecially the get_login_url and get_logout_url.00:30
mcdoncyeah thats not bad00:30
mcdoncwho wants to support more than login-form based systems but the fact that it does is pretty useless much of the time00:31
J1mHow so?00:31
J1mNot sure I understad what you just said.00:31
mcdoncwell, the 99% case is someone wants to display a login form either at initial visit or in response to someone visiting a resource that the user doesnt have authorization to see00:32
mcdoncright now the "API" for the last case is to return a 40100:32
J1mActually, that's my 1% use case. :)00:32
mcdoncwhats your 9900:33
J1mMany sites I care about are public, but the user can log in to do special things.00:33
J1mand log out when their done.00:33
J1m(1% was a slight exageration).00:34
mcdoncyep... do you want to show a login form when they visit a url that they can't access without credentials?  (either via a redirect or directly?)00:34
J1mno00:34
mcdoncwhat happens in that case?00:34
J1mI want to tell them they can't do it and offer them a login link.00:34
J1malthough, a login box will often be better at that point.00:35
mcdoncok... so... one way to do this with who would be to create a challenge decider that always returns false00:35
mcdoncthen when the app wants to signify that a user should log in, redirect them to that page00:35
mcdoncor just return it00:35
J1mwhat page, a login page?00:36
mcdonc"ell them they can't do it and offer them a login link."00:36
mcdoncthat page00:36
J1mNot sure I understand.00:37
J1mI guess if they can't do something, I'd either offer them a link to the login page, or redirect them to the login page.00:38
J1mSo, really, I want login and logout page.00:38
mcdoncwell forgetting about who for a sec, when they visit some resource they cant get to, have zope return a response that either has the login link or return the login page itself00:38
J1mI want to pass a URL to the pages so when they're done, they can redirect back.00:38
J1mright00:38
J1mexactly00:39
mcdoncthen if who is in the mix, the login page (forgetting about basic auth for a sec) could post to the login handler00:39
mcdonc(each form plugin has a login handler)00:40
mcdoncwell, at least the redirecting one00:40
mcdoncbut it might be easier to just disuse who and post to a view in the app00:40
J1mbtw, I'm really tired of pluggable auth systems. They're soooo complicated.  I thought you were "I hate frameworks" man. :)00:41
mcdoncme and tres just had a yelling match yesterday about it ;-)00:41
mcdonci said "its too complicated!"00:41
mcdoncit is00:41
J1m+1!!!00:41
mcdonci'm going to try to turn it into a library, and if that doesn't work, just ditch it00:42
J1mBut at least it works, if I can figure it out. :)00:42
mcdoncyeah.  sorta, at least.00:42
J1mI got basic and form working (sans logout for the later)00:42
mcdoncwell thats good at least00:43
J1mI looked at other wsgi auth handlers and kept coming back to who. :)00:44
mcdoncin the land of the blind....00:44
J1mheh00:44
J1mWell, thanks for the info. Good luck with the redesign.00:46
mcdoncthanks00:46
*** J1m has quit IRC00:57
*** junkafarian has quit IRC01:04
*** greenman has joined #zope3-dev01:15
*** romanofski has joined #zope3-dev01:16
*** greenman has quit IRC01:22
*** romanofski has quit IRC01:39
*** hathawsh is now known as hath|away01:50
*** JaRoel|4D has quit IRC02:05
*** davisagli has joined #zope3-dev02:16
*** greenman has joined #zope3-dev02:25
*** davisagli has left #zope3-dev02:30
*** harobed has joined #zope3-dev02:33
*** harobed has quit IRC02:41
*** flox1 has quit IRC03:11
*** Theuni1 has quit IRC03:27
*** pelle_ has joined #zope3-dev03:28
*** pelle__ has quit IRC03:32
*** hath|away is now known as hathawsh03:38
*** greenman_ has joined #zope3-dev03:40
*** greenman has quit IRC03:50
*** hathawsh is now known as hath|away04:05
*** yota has quit IRC04:33
*** hath|away is now known as hathawsh05:01
*** J1m has joined #zope3-dev05:08
*** dbfrombrc is now known as dbfrombrc|away05:18
*** aaronv has quit IRC05:24
*** hathawsh is now known as hath|away05:33
*** jfkw has quit IRC05:45
*** dbfrombrc|away has quit IRC06:04
*** hath|away is now known as hathawsh06:08
*** J1m has quit IRC06:18
*** davisagli has joined #zope3-dev06:27
*** hathawsh is now known as hath|away06:28
*** afd___ has joined #zope3-dev06:31
*** hath|away is now known as hathawsh08:23
*** kaeru has quit IRC08:26
*** kursor has joined #zope3-dev08:39
*** kaeru has joined #zope3-dev08:47
*** hathawsh is now known as hath|away08:56
*** ignas has joined #zope3-dev09:11
*** hath|away is now known as hathawsh09:12
*** agroszer has joined #zope3-dev10:03
*** junkafarian has joined #zope3-dev10:18
*** jukart has joined #zope3-dev10:40
*** redir has quit IRC11:22
*** dunny has joined #zope3-dev11:36
*** flox has joined #zope3-dev11:37
*** ktwilight_ has joined #zope3-dev11:40
*** iham has joined #zope3-dev11:43
*** agroszer has quit IRC11:47
*** ktwilight has quit IRC11:54
*** iham has joined #zope3-dev11:55
*** iham has quit IRC12:00
*** jukart has quit IRC12:00
*** tarek has joined #zope3-dev12:04
*** quodt has joined #zope3-dev12:11
*** kursor has quit IRC12:14
*** iham has joined #zope3-dev12:21
*** afd___ has quit IRC12:21
*** iham has quit IRC12:23
*** quodt has quit IRC12:34
*** jukart has joined #zope3-dev12:35
*** jukart has quit IRC12:52
*** kursor has joined #zope3-dev13:00
*** iham has joined #zope3-dev13:05
*** J1m has joined #zope3-dev13:25
*** kursor has quit IRC13:30
*** iham has quit IRC13:33
*** harobed has joined #zope3-dev13:40
*** greenman_ has quit IRC13:48
*** hathawsh has quit IRC13:51
*** Jell-O-Fishi has joined #zope3-dev13:52
*** aaronv has joined #zope3-dev13:54
*** iham has joined #zope3-dev14:04
*** yota has joined #zope3-dev14:19
*** iham has quit IRC14:44
*** __mac__ has joined #zope3-dev15:19
*** afd_ has joined #zope3-dev15:26
*** harobed has quit IRC15:50
*** afd__ has joined #zope3-dev15:55
*** VladDrac has quit IRC16:02
*** afd_ has quit IRC16:11
*** markusleist1 has joined #zope3-dev16:43
*** markusleist has quit IRC16:52
*** J1m has quit IRC17:04
*** agroszer has joined #zope3-dev17:12
*** JaRoel|4D has joined #zope3-dev17:13
*** dunny has quit IRC17:17
*** J1m has joined #zope3-dev17:28
*** __mac__ has quit IRC17:37
*** Theuni1 has joined #zope3-dev17:39
*** __mac___ has joined #zope3-dev17:40
*** JaRoel|4D has quit IRC17:45
*** J1m has quit IRC18:05
*** __mac___ has quit IRC18:14
*** tarek has quit IRC18:39
*** jayaraj has joined #zope3-dev18:52
*** jayaraj has quit IRC18:55
*** Jell-O-Fishi has quit IRC19:05
*** Fubar^ has quit IRC19:05
*** Fubar^ has joined #zope3-dev19:16
*** redir has joined #zope3-dev19:16
*** Jell-O-Fishi has joined #zope3-dev19:21
*** jukart has joined #zope3-dev19:29
*** kursor has joined #zope3-dev19:44
*** JaRoel|4D has joined #zope3-dev19:45
*** redir is now known as redir_19:45
*** Theuni2 has joined #zope3-dev19:45
*** redir_ is now known as redir19:45
*** Theuni2 has quit IRC19:47
*** Theuni2 has joined #zope3-dev19:47
*** Theuni1 has quit IRC19:50
*** tarek has joined #zope3-dev19:55
*** harobed has joined #zope3-dev20:05
*** tarek has quit IRC20:05
*** Theuni2 has quit IRC20:07
*** Theuni1 has joined #zope3-dev20:07
*** jukart has quit IRC20:09
*** tarek has joined #zope3-dev20:14
*** ccomb has quit IRC20:21
*** jpcw has joined #zope3-dev20:32
*** jukart has joined #zope3-dev20:32
*** JaRoel|4D has quit IRC20:34
*** aaronv has quit IRC20:37
*** Theuni1 has quit IRC21:04
*** agroszer has quit IRC21:06
*** iham has joined #zope3-dev21:09
*** jukart has quit IRC21:11
*** iham has quit IRC21:12
*** basti__ has joined #zope3-dev21:17
*** ccomb has joined #zope3-dev21:18
*** aaronv has joined #zope3-dev21:25
*** quodt has joined #zope3-dev21:38
*** basti__ has quit IRC21:44
*** jfkw has joined #zope3-dev21:48
*** tarek has quit IRC22:07
*** afd__ has quit IRC22:08
*** Theuni1 has joined #zope3-dev22:08
*** davisagli_ has joined #zope3-dev22:09
*** redir has quit IRC22:12
*** greenman has joined #zope3-dev22:17
*** davisagli has quit IRC22:26
*** kursor has quit IRC22:33
*** greenman has quit IRC22:39
*** agroszer has joined #zope3-dev22:49
*** J1m has joined #zope3-dev22:55
*** jpcw has quit IRC23:01
*** iham has joined #zope3-dev23:07
*** ccomb has quit IRC23:08
*** ccomb has joined #zope3-dev23:11
*** iham has quit IRC23:17
*** dunny has joined #zope3-dev23:19
*** pelle__ has joined #zope3-dev23:28
*** aaronv has quit IRC23:28
*** tarek has joined #zope3-dev23:36
*** redir has joined #zope3-dev23:37
*** pelle_ has quit IRC23:44
*** davisagli_ is now known as davisagli23:49
*** iham has joined #zope3-dev23:54
*** iham has quit IRC23:59
« Saturday, 2009-05-09 Index Monday, 2009-05-11 »

Generated by irclog2html.py 2.15.1 by Marius Gedminas - find it at mg.pov.lt!