dj-authentication 0.1.1

Nice HTTP authentication support for Django

Nice HTTP authentication support for Django

This is a common base for supporting multiple auth methods in an app.

Right now, we provide only the HTTP Basic auth module; but you can easily add your own specific schemes, if you need them, and more generic ones are going to be added in the future (see Planned features).

Requirements

• Django 2.0+

Installation

pip install dj-authentication

settings.py

• Add 'dj_authentication' to the list of INSTALLED_APPS.
• Remove 'django.contrib.auth.middleware.AuthenticationMiddleware' from the list of MIDDLEWAREs.
• Add dj_authentication.request_http_auth.HTTPAuthMiddleware to the list of MIDDLEWAREs.
• Choose backends used for determining request.user, for example:

REQUEST_USER_BACKENDS = [
    'dj_authentication.methods.basic', # HTTP Basic Auth
    'django.contrib.auth',
]

Tips

To trigger an authentication dialog in a browser, if the user is not authenticated:

if not request.user.is_authenticated:
    return HttpResponse(status=401)

Note: this requires dj_authentication.methods.basic backend.

Planned features

• Support for Bearer scheme with JWT tokens verified against an OAuth/OIDC auth server thru jwks_uri
• Support for Bearer scheme with opaque tokens verified against an OAuth/OIDC auth server thru Introspection Endpoint
• Support for client certificates (see also OAuth 2.0 Mutual TLS)
• Support for OIDC private_key_jwt scheme