Thanks to everyone for their replies..

Diez, Gustavo,

* We have
  * a URL based login method (which sets up the cookies)
  * and we attache the cookies to the xml-rpc handle.
This is similar to option to suggested by Diez. The problem with this
is that we need to implement login in each language for this to work.
(among feeling it to be a hack)

I was/am still hoping..  :)
a. XML-RPC controller to "parse" the user id..etc.
b. We calling some repos.who) to create/populate session.
(for us @ decorators are not very high priority.. I will have to
double check though)

>From the discussion.. I still have some questions..
 a. how does repos.who auth extensions/plugin suggested by Gustavo
go ? i.e how does it tie in to TG2)
 b. Would returning credentials suggested last would ....session etc.
correctly ?

Michael,
We will definitely try the xmlrpc controller.. but at this point it
might be bit late for us.
Some questions along those lines.
a. Will it work with TG2 2.0.3 ?
b. Will a simple login method and others work  (setup session ?)

Once again. Thanks
/Jd

> > The point I'm trying to make is that this kind of things can perfectly be
> > done with repoze.who, without bringing any hack to the authorization
> > controls like that @xrequire decorator or the other things you suggested.
>
> > Want to get the credentials from the  body instead of the POST arguments?
> > Fine, simply change the following lines:
>
> >       request = Request(environ)
> >       if "login" in request.POST and "password" in request.POST:
> >           credentials = {
> >               'login': request.POST['login'],
> >               'password': request.POST['password'],
> >               }
>
> > to:
> >       parsed_xmlrpc = parse_it(environ['wsgi.input'])
> >       if "login" in parsed_xmlrpc and "password" in parsed_xmlrcp:
> >           credentials = {
> >               'login': parsed_xmlrpc['login'],
> >               'password': parsed_xmlrpc['password'],
> >               }
>
> > That simple.

-- 
You received this message because you are subscribed to the Google Groups 
"TurboGears" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/turbogears?hl=en.

Reply via email to