Skip to main content

REST Multi-factor authentication package for Django

Project description

This is a fork from https://github.com/merixstudio/django-trench meant to be used with baseapp packages

https://cybersecurity-excellence-awards.com/wp-content/uploads/2021/06/badges_2022_Silver.png
https://github.com/merixstudio/django-trench/actions/workflows/django-package.yml/badge.svg https://codecov.io/gh/merixstudio/django-trench/branch/master/graph/badge.svg?token=U4yDiXUDkb https://readthedocs.org/projects/django-trench/badge/?version=latest https://img.shields.io/pypi/v/django-trench
django-trench provides a set of REST API endpoints to supplement django-rest-framework with multi-factor authentication (MFA, 2FA). It supports both standard built-in authentication methods, as well as JWT (JSON Web Token).
We deliver a couple of sample secondary authentication methods including sending OTP based code by:
  • E-mail

  • SMS / text

  • 3rd party mobile apps

  • YubiKey

Developers can easily add their own authentication backends supporting any communication channel.

Features

  • Easily pluggable and compatible with django-rest-framework

  • Allows user to pick an additional authentication method from range of backends defined by a developer. Read more: backends

  • Comes out of a box with email, SMS, mobile apps and YubiKey support

Supported versions

  • Python 3.7, 3.8, 3.9, 3.10

  • Django 2.0, 2.1, 2.2, 3.0, 3.1, 3.2, 4.0, 4.1

  • Django REST Framework 3.10, 3.11, 3.12, 3.13, 3.14

If you are going to use JWT authentication:

Quick Start

  1. Install the package using pip:

pip install django-trench

or add it to your requirements file.

  1. Add trench library to INSTALLED_APPS in your app settings file:

INSTALLED_APPS = (
    ...,
    'rest_framework',
    'rest_framework.authtoken',  # In case of implementing Token Based Authentication
    ...,
    'trench',
)
  1. Run migrations

Read further in: installation.

Translation

Trench uses Transifex service to translate our package into other languages.

We will appreciate your help with translation.

https://www.transifex.com/merixstudio/django-trench/dashboard/

Local development

  1. Clone the repo.

  2. Crete virtual environment named e.g. .venv:

    virtualenv .venv
  3. Activate the virtual environment:

    source .venv/bin/activate
  4. Install dependencies:

    pip install black mypy
    pip install -r testproject/requirements.txt
  5. Set environment variables:

    export PYTHONPATH=./testproject
    export DJANGO_SETTINGS_MODULE=settings
    export SECRET_KEY=YOURsecretGOEShere
  6. Create a symbolic link to the trench/ module inside the testproject/ directory to emulate the trench package being installed.

    # make sure you run this command from the root directory of this project
    ln -s $(pwd)/trench/ $(pwd)/testproject/trench
  7. Check whether the tests are passing:

    pytest --cov=testproject/trench testproject/tests/

Remember - anytime you change something in the django-trench source code you need to re-build and re-install the package (steps 6-7) for the changes to be present during e.g. running the tests.

  1. [OPTIONAL] To make the tests run faster you can try to execute them in parallel.

    To do so you need to install the pytest-xdist package and run the tests with additional parameter of -n 8 where 8 stands for the number of threads that will be spawned for executing the tests. Depending on the machine you’re using using this tool can speed up the test execution process up to 5 times.

    pytest -n 8 --cov=testproject/trench testproject/tests/

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

baseapp-django-trench-0.4.2.tar.gz (31.3 kB view details)

Uploaded Source

Built Distribution

baseapp_django_trench-0.4.2-py3-none-any.whl (40.6 kB view details)

Uploaded Python 3

File details

Details for the file baseapp-django-trench-0.4.2.tar.gz.

File metadata

  • Download URL: baseapp-django-trench-0.4.2.tar.gz
  • Upload date:
  • Size: 31.3 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/4.0.2 CPython/3.10.12

File hashes

Hashes for baseapp-django-trench-0.4.2.tar.gz
Algorithm Hash digest
SHA256 1951ca72666ccf92c72a0f7ec5699217e829b55740b419230085f161d8e41a0b
MD5 aab659e41c02c2a5df6acb670c868ca5
BLAKE2b-256 2fca4e80214ba0785956cd380015d0a480ae48fa6546c9187baad85f5cadb819

See more details on using hashes here.

File details

Details for the file baseapp_django_trench-0.4.2-py3-none-any.whl.

File metadata

File hashes

Hashes for baseapp_django_trench-0.4.2-py3-none-any.whl
Algorithm Hash digest
SHA256 e551d28b6804a341dd19bbe01620469b44a64a7008e9c0e295293b93c5a3ac7d
MD5 ab2e631904b2af34086e23bf44a2f47e
BLAKE2b-256 16c479d89e6a06c0d8f23d3f0fd345eb6be514ebbd64f91b017508052763eda9

See more details on using hashes here.

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page