Converting mod_python auth code to mod_wsgi

[Bonkabonka]

I'm trying to port some code I wrote several years ago in mod_python
to mod_wsgi and am not having any luck finding examples/documentation
on how one would do cookie/session-based authentication with mod_wsgi
- everything I've found wants to talk about basic or digest auth.

What I'd done in mod_python was to define an authenhandler that
integrated with our SSO server. Additionally, I defined an
authzhandler that validated access to requests based on rules defined
in our app's database. This thread (http://groups.google.com/group/
modwsgi/browse_thread/thread/42e2d356d4eac415/7e0dbd853c64bfe9) seems
to come the closest to talking about what I want to do but, again,
it's using Basic auth. =/

This page (http://plonexp.leocorn.com/xp/leocornus.django.ploneproxy/
xps8) seems to say I can't do what I want to do.

Any pointers?

[Bonkabonka]

On Aug 29, 11:36 am, Bonkabonka <bonkabo...@gmail.com> wrote:
> I'm trying to port some code I wrote several years ago in mod_python
> to mod_wsgi and am not having any luck finding examples/documentation
> on how one would do cookie/session-based authentication with mod_wsgi
> - everything I've found wants to talk about basic or digest auth.

I should mention that the site is almost entirely static - I'd only be
using the dynamic bits to authenticate and authorize.

[Graham Dumpleton]

For now I would suggest you look at mod_auth_tkt.

http://www.openfusion.com.au/labs/mod_auth_tkt/

This is likely going to make things easier.

There are some sorts of authentication handler stuff that you could do
in mod_python that aren't done easily or not at all in mod_wsgi.

Graham

> --
> You received this message because you are subscribed to the Google Groups "modwsgi" group.
> To post to this group, send email to mod...@googlegroups.com.
> To unsubscribe from this group, send email to modwsgi+u...@googlegroups.com.
> For more options, visit this group at http://groups.google.com/group/modwsgi?hl=en.
>
>

[Bonkabonka]

On Aug 29, 5:07 pm, Graham Dumpleton <graham.dumple...@gmail.com>
wrote:

> For now I would suggest you look at mod_auth_tkt.

Aha! That looks like a fantastic solution. =) Thank you very much
for the pointer!