What is PyAMS?

PyAMS (Pyramid Application Management Suite) is a small suite of packages written for applications and content management with the Pyramid framework.

PyAMS is actually mainly used to manage web sites through content management applications (CMS, see PyAMS_content package), but many features are generic and can be used inside any kind of web application.

All PyAMS documentation is available on ReadTheDocs; source code is available on Gitlab and pushed to Github. Doctests are available in the doctests source folder.

What is PyAMS HMAC authentication package?

PyAMS HMAC authentication package is an extension package for PyAMS_security, which allows users authentication using an HMAC+SHA1 encoded token based on a shared secret.

These tokens can be used in contexts where users can’t provide common authentication credentials, like JWT tokens, using HTTP headers, and must provide their credentials inside the URL.

Please note that even if generated tokens are only valid for the current day, this kind of authentication method IS NOT SAFE and should be avoided to access sensitive data, as tokens will be visible in access logs, and that shared secret should be refreshed frequently.

Changelog