Skip to main content

Authentication utils for Django

Project description

https://travis-ci.org/matthiask/django-authlib.svg?branch=master Documentation Status https://codeclimate.com/github/matthiask/django-authlib.png

authlib is a collection of authentication utilities for implementing passwordless authentication. This is achieved by either sending cryptographically signed links by email, or by fetching the email address from third party providers such as Google, Facebook and Twitter. After all, what’s the point in additionally requiring a password for authentication when the password can be easily resetted on most websites when an attacker has access to the email address?

Usage

  • Install django-authlib using pip into your virtualenv.
  • Add authlib.backends.EmailBackend to AUTHENTICATION_BAcKENDS.
  • Adding authlib to INSTALLED_APPS is optional and only useful if you want to use the bundled translation files. There are no required database tables or anything of the sort.
  • Have a user model which has a email field named email as username. For convenience a base user model and manager are available in the authlib.base module, BaseUser and BaseUserManager. The BaseUserManager is automatically available as objects when you extend the BaseUser.
  • Use the bundled views or write your own. The bundled views give feedback using django.contrib.messages, so you may want to check that those messages are visible to the user.

The Google, Facebook and Twitter OAuth clients require the following settings:

  • GOOGLE_CLIENT_ID
  • GOOGLE_CLIENT_SECRET
  • FACEBOOK_CLIENT_ID
  • FACEBOOK_CLIENT_SECRET
  • TWITTER_CLIENT_ID
  • TWITTER_CLIENT_SECRET

Note that you have to configure the Twitter app to allow email access, this is not enabled by default.

Use of bundled views

The following URL patterns are an example for using the bundled views. For now you’ll have to dig into the code (it’s not much, at the time of writing django-authlib’s Python code is less than 500 lines):

from django.conf.urls import url
from authlib import views
from authlib.facebook import FacebookOAuth2Client
from authlib.google import GoogleOAuth2Client
from authlib.twitter import TwitterOAuthClient

urlpatterns = [
    url(
        r'^login/$',
        views.login,
        name='login',
    ),
    url(
        r'^oauth/facebook/$',
        views.oauth2,
        {
            'client_class': FacebookOAuth2Client,
        },
        name='accounts_oauth_facebook',
    ),
    url(
        r'^oauth/google/$',
        views.oauth2,
        {
            'client_class': GoogleOAuth2Client,
        },
        name='accounts_oauth_google',
    ),
    url(
        r'^oauth/twitter/$',
        views.oauth2,
        {
            'client_class': TwitterOAuthClient,
        },
        name='accounts_oauth_twitter',
    ),
    url(
        r'^email/$',
        views.email_registration,
        name='email_registration',
    ),
    url(
        r'^email/(?P<code>[^/]+)/$',
        views.email_registration,
        name='email_registration_confirm',
    ),
    url(
        r'^logout/$',
        views.logout,
        name='logout',
    ),
]

Admin OAuth2

The authlib.admin_oauth app allows using Google OAuth2 to allow all users with the same email domain to authenticate for Django’s administration interface. You have to use authlib’s authentication backend (EmailBackend) for this.

Installation is as follows:

  • Add authlib.admin_oauth to your INSTALLED_APPS before django.contrib.admin, so that our login template is picked up.

  • Add GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET to your settings as described above.

  • Add a ADMIN_OAUTH_PATTERNS setting (the first item is the domain, the second the email address of an existing staff account):

    ADMIN_OAUTH_PATTERNS = [
        (r'@example\.com$', 'admin@example.com'),
    ]
    
  • Add an entry to your URLconf:

    urlpatterns = [
        url(r'', include('authlib.admin_oauth.urls')),
        # ...
    ]
    
  • Add https://yourdomain.com/admin/__oauth__/ as a valid redirect URI in your Google developers console.

Little Auth

The authlib.little_auth app contains a basic user model with email as username that can be used if you do not want to write your own user model but still profit from authlib’s authentication support.

Usage is as follows:

  • Add authlib.little_auth to your INSTALLED_APPS
  • Set AUTH_USER_MODEL = 'little_auth.User'
  • Optionally also follow any of the steps above.

Project details


Release history Release notifications

History Node

0.6.4

History Node

0.6.3

History Node

0.6.2

This version
History Node

0.6.1

History Node

0.6.0

History Node

0.5.3

History Node

0.5.2

History Node

0.5.1

History Node

0.5.0

History Node

0.4.0

History Node

0.3.3

History Node

0.3.2

History Node

0.3.1

History Node

0.3.0

History Node

0.2.3

History Node

0.2.2

History Node

0.2.1

History Node

0.2.0

History Node

0.1.0

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Filename, size & hash SHA256 hash help File type Python version Upload date
django_authlib-0.6.1-py2.py3-none-any.whl (25.6 kB) Copy SHA256 hash SHA256 Wheel py2.py3 Feb 14, 2018
django-authlib-0.6.1.tar.gz (17.4 kB) Copy SHA256 hash SHA256 Source None Feb 14, 2018

Supported by

Elastic Elastic Search Pingdom Pingdom Monitoring Google Google BigQuery Sentry Sentry Error logging CloudAMQP CloudAMQP RabbitMQ AWS AWS Cloud computing Fastly Fastly CDN DigiCert DigiCert EV certificate StatusPage StatusPage Status page