User management and association authentication for tiny_pacs: user accounts live in the database and incoming associations are authenticated according to the calling device’s identity policy (DICOM User Identity negotiation, PS3.7 D.3.3.7).
What it provides
The Users component — keeps user accounts (salted password hashes, an active flag, last-login bookkeeping) in the database.
The UserIdentityAuth component — authenticates incoming associations against the calling device’s per-device identity policy (none, username, password); known devices without a policy fall back to default_policy, unknown devices to unknown_device_policy (none, username, password or reject).
The tiny-pacs users list|add|passwd|remove|set-active subcommands for offline user management. Passwords are prompted and never accepted as command line arguments.
It depends on tiny-pacs-admin: the per-device identity policy is part of the device record, so installing this extension pulls the device registry in automatically.
Installation
pip install tiny-pacs-identity
or with the convenience extra:
pip install tiny_pacs[identity]
Installing the extension never changes server behaviour: both components stay disabled until enabled in the configuration.
Configuration
components:
DeviceStore:
on: true
default_identity: none # policy for auto-added devices
Users:
on: true
UserIdentityAuth:
on: true
default_policy: none # known devices without a policy
unknown_device_policy: none # none | username | password | reject
Set a per-device policy in YAML (identity: password next to the device) or with tiny-pacs devices add/update --identity. A “require identity everywhere” deployment is default_policy: password plus unknown_device_policy: reject.
Create users with the CLI against the offline database before starting the server:
tiny-pacs users add alice
tiny-pacs users list
Security note: User Identity negotiation transmits credentials inside A-ASSOCIATE. Enable TLS (ae.tls) whenever non-none identity policies are used.
Documentation
See the User identity tutorial in the tiny_pacs documentation.
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file tiny_pacs_identity-0.1.0.tar.gz.
File metadata
- Download URL: tiny_pacs_identity-0.1.0.tar.gz
- Upload date:
- Size: 12.4 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
645ced0f5c7bf24f0a1bedf491f199ff0379914289262eb4f1174e79212ec922
|
|
| MD5 |
1845bd58555cb2978b4aeca61b5ff297
|
|
| BLAKE2b-256 |
5040a8223c7582203497728577d292290b862b098260bf062925ac9c063512ed
|
Provenance
The following attestation bundles were made for tiny_pacs_identity-0.1.0.tar.gz:
Publisher:
publish.yml on blanebf/tiny_pacs
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
tiny_pacs_identity-0.1.0.tar.gz -
Subject digest:
645ced0f5c7bf24f0a1bedf491f199ff0379914289262eb4f1174e79212ec922 - Sigstore transparency entry: 2703029085
- Sigstore integration time:
-
Permalink:
blanebf/tiny_pacs@5434d2057cd43a316e536178a91d99de6ace4b19 -
Branch / Tag:
refs/heads/master - Owner: https://github.com/blanebf
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@5434d2057cd43a316e536178a91d99de6ace4b19 -
Trigger Event:
workflow_dispatch
-
Statement type:
File details
Details for the file tiny_pacs_identity-0.1.0-py3-none-any.whl.
File metadata
- Download URL: tiny_pacs_identity-0.1.0-py3-none-any.whl
- Upload date:
- Size: 14.9 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
dcde1a014fef3ec0c28b9e74aae0390b0921a2027c5e47d40fc40120a75944ab
|
|
| MD5 |
52b7a1ef8acba63709757147faf8826a
|
|
| BLAKE2b-256 |
4739a8f31d41f5c496cfc45f5ba5c3caf16238bcfd0b7ca8c59d9001f246499b
|
Provenance
The following attestation bundles were made for tiny_pacs_identity-0.1.0-py3-none-any.whl:
Publisher:
publish.yml on blanebf/tiny_pacs
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
tiny_pacs_identity-0.1.0-py3-none-any.whl -
Subject digest:
dcde1a014fef3ec0c28b9e74aae0390b0921a2027c5e47d40fc40120a75944ab - Sigstore transparency entry: 2703029116
- Sigstore integration time:
-
Permalink:
blanebf/tiny_pacs@5434d2057cd43a316e536178a91d99de6ace4b19 -
Branch / Tag:
refs/heads/master - Owner: https://github.com/blanebf
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@5434d2057cd43a316e536178a91d99de6ace4b19 -
Trigger Event:
workflow_dispatch
-
Statement type: