django-eds-auth 0.2.0

Django EDS authentication package

django-eds-auth

A secure Django authentication backend for EDS (Electronic Digital Signature) based authentication. Uses X.509 certificates and nonce-based challenge-response for cryptographically secure authentication.

Overview

django-eds-auth is a Django authentication backend that implements EDS (Electronic Digital Signature) based login using X.509 certificates. It provides:

• ✅ Challenge-response authentication with single-use nonces
• ✅ RSA, ECDSA, and DSA signature verification support
• ✅ X.509 certificate chain validation
• ✅ Replay attack prevention
• ✅ Comprehensive audit logging
• ✅ No private keys stored on server

Project Structure

• src/django_eds_auth/ - Main package code
• example_project/ - Example Django project for testing
• tests/ - Unit and integration tests (56 tests total)
• docs/ - Documentation and guides

Quick Start

Installation

# Install the package with development dependencies
pip install -e ".[dev]"

# Or install using pip directly
pip install django-eds-auth

Configuration

1. Add to INSTALLED_APPS in Django settings:

INSTALLED_APPS = [
    # ...
    'django_eds_auth',
]

2. Add authentication backend:

AUTHENTICATION_BACKENDS = [
    'django.contrib.auth.backends.ModelBackend',
    'django_eds_auth.backends.EDSAuthBackend',
]

3. Configure certificate paths (example):

EDS_AUTH_SERVER_CERT_PATH = os.getenv('EDS_AUTH_SERVER_CERT_PATH', '/path/to/cert.pem')
EDS_AUTH_SERVER_KEY_PATH = os.getenv('EDS_AUTH_SERVER_KEY_PATH', '/path/to/key.pem')
EDS_AUTH_TRUSTED_CA_CERTS_PATH = os.getenv('EDS_AUTH_TRUSTED_CA_CERTS_PATH', '')

4. Run migrations:

python manage.py migrate

5. Start the development server:

cd example_project
python manage.py runserver

Docker Integration

The project includes Dockerfile and docker-compose.yml for local development with PostgreSQL.

1) Prepare environment variables

cp .env.example .env

Update .env if needed (database credentials, Django settings, etc.).

2) Build and start containers

docker compose up --build

This starts:

• db - PostgreSQL 16
• web - Django app on http://localhost:8000

3) Run migrations inside container

In a second terminal:

docker compose exec web python example_project/manage.py migrate

4) Optional: create superuser

docker compose exec web python example_project/manage.py createsuperuser

5) Stop containers

docker compose down

To remove volumes too:

docker compose down -v

Testing

Running the full test suite:

# Run all tests with verbose output
pytest tests/ -v

# Run with coverage report
pytest tests/ --cov=django_eds_auth --cov-report=term-missing

# Run only security tests
pytest tests/test_security_and_coverage.py -v

# Run with timing information
pytest tests/ -v --durations=10

Current test results: 56 tests PASSED ✅

• Coverage: 60% (improved from 46%)
• Security module (signature_verification.py): 85% (critical coverage)

Documentation

• COVERAGE_REPORT.md - Detailed test coverage analysis
• VERIFICATION.md - Requirement verification and compliance
• IMPLEMENTATION_GUIDE.md - Detailed implementation guide

License

MIT License