Simple auth for OAuth 2.0, 1.0 and OpenID

[alex]

https://github.com/scotch/engineauth is awesome. 

What I didn't like is a long list of dependencies and the fact that there's already user model in webapp2 framework. Basically, I wanted something simpler, with a smaller code base.

So, after all, I took another approach, without rewriting existing stuff in webapp2:

https://github.com/crhym3/simpleauth

simple test app is here:

http://simpleauth.appspot.com

alex.

[Roberto Previtera]

Hello Alex, excellent work, thanks for sharing !

I think that the engineauth feature of dealing with multiple auth profiles per user is still missing, though.

Roberto

[alex]

Hey, thanks! 

this was a weekend project and I didn't have time to add unit tests, but I plan on extensive unit testing next weekend.

[Coto]

thanks for sharing Alex. Would you like if I add this to https://github.com/coto/gae-boilerplate

the focus of that boilerplate so far if authentication with an own system of register, but with the OAuth that you made would be way better.

I thik the same of Roberto about the feature of dealing multiple accounts with one user, so you can choose an account to login to the same account (as Stackoverflow do)

@coto

[alex]

sure! I'm happy you guys find it useful.

[Jakob Holmelund]

Great work alex, personally i like this approach better than the one in engine auth. I've started to implement this into my project, i'll let you know if i find any bugs or optimizations. 

[Nguyen Truong Hoang]

for localhost test and register with OAuth Providers :

http://ben.onfabrik.com/posts/oauth-providers

[Rafael Ramos-Garijo]

Thanks alex, i have found your library very useful. Excellent work :)

[Niklas Rosencrantz]

I also checked out simpleauth and found I could use it. But I run many
domains for one app engine app, so I must have many facebook apps for
my one app engine app.
Thank you

[alex]

Thank you all for checking it out. I'm happy to hear that!

I'll add a few more tests, improve code, docs and the example. 

I'll keep you guys posted.

-- alex

[alex]

There's a interesting discussion about CSRF protection for OAuth 2.0 using the state parameter (with or w/o HMAC digest), if you're interested:

http://code.google.com/p/gae-simpleauth/issues/detail?id=1

[alex]

Hey guys, I thought I'd let you know about the new release.

Changelog:

v0.1.3 - 2012-09-19
  * CSRF protection for OAuth 2.0
    http://code.google.com/p/gae-simpleauth/issues/detail?id=1
  * Custom exceptions
    http://code.google.com/p/gae-simpleauth/issues/detail?id=2
  * Example app improvements, including:
    - CSRF guard
    - show exception messages for demo purposes
    - prettier output of session, profile data and auth_info dictionaries
    - https://github.com/crhym3/simpleauth/issues/4
    - https://github.com/crhym3/simpleauth/issues/5
  * More useful info in README