zope.app.pluggableauth 3.4.0

详细文档

新的认证服务设计

当前实现将被替换。以下是我与Jim Fulton一起构思的设计方案。 – itamar

请注意，此设计（以某种形式）已由可插拔认证服务实现。此文档需要更新以反映最终实现。

新的AuthenticationService设计笔记

服务包含一个用户源列表。它们实现接口，从

class IUserPassUserSource:
    """Authenticate using username and password."""

    def authenticate(username, password):
        "Returns boolean saying if such username/password pair exists"


class IDigestSupportingUserSource(IUserPassUserSource):
    """Allow fetching password, which is required by digest auth methods"""

    def getPassword(username):
        "Return password for username"

等。可能还有其他接口，用于处理证书认证等。可能需要扩展上述接口以处理主体标题和描述等。

登录方法（cookie认证、HTTP基本认证、摘要认证、FTP认证）注册为上述接口之一的视图。

class ILoginMethodView:

      def authenticate():
           """Return principal for request, or None."""

      def unauthorized():
           """Tell request that a login is required."""

认证服务实现如下

class AuthenticationService:

    def authenticate(self, request):
        for us in self.userSources:
             loginView = getView(self, us, "login", request)
             principal = loginView.authenticate()
             if principal is not None:
                 return principal

    def unauthorized(self, request):
        loginView = getView(self, self.userSources[0], request)
        loginView.unauthorized()

3.4.0 (2007-10-25)

• 首次发布，独立于主Zope树。