Skip to main content

User management and association authentication for tiny_pacs: user accounts live in the database and incoming associations are authenticated according to the calling device’s identity policy (DICOM User Identity negotiation, PS3.7 D.3.3.7).

What it provides

  • The Users component — keeps user accounts (salted password hashes, an active flag, last-login bookkeeping) in the database.

  • The UserIdentityAuth component — authenticates incoming associations against the calling device’s per-device identity policy (none, username, password); known devices without a policy fall back to default_policy, unknown devices to unknown_device_policy (none, username, password or reject).

  • The tiny-pacs users list|add|passwd|remove|set-active subcommands for offline user management. Passwords are prompted and never accepted as command line arguments.

It depends on tiny-pacs-admin: the per-device identity policy is part of the device record, so installing this extension pulls the device registry in automatically.

Installation

pip install tiny-pacs-identity

or with the convenience extra:

pip install tiny_pacs[identity]

Installing the extension never changes server behaviour: both components stay disabled until enabled in the configuration.

Configuration

components:
  DeviceStore:
    on: true
    default_identity: none    # policy for auto-added devices
  Users:
    on: true
  UserIdentityAuth:
    on: true
    default_policy: none           # known devices without a policy
    unknown_device_policy: none    # none | username | password | reject

Set a per-device policy in YAML (identity: password next to the device) or with tiny-pacs devices add/update --identity. A “require identity everywhere” deployment is default_policy: password plus unknown_device_policy: reject.

Create users with the CLI against the offline database before starting the server:

tiny-pacs users add alice
tiny-pacs users list

Security note: User Identity negotiation transmits credentials inside A-ASSOCIATE. Enable TLS (ae.tls) whenever non-none identity policies are used.

Documentation

See the User identity tutorial in the tiny_pacs documentation.

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

tiny_pacs_identity-0.1.0.tar.gz (12.4 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

tiny_pacs_identity-0.1.0-py3-none-any.whl (14.9 kB view details)

Uploaded Python 3

File details

Details for the file tiny_pacs_identity-0.1.0.tar.gz.

File metadata

  • Download URL: tiny_pacs_identity-0.1.0.tar.gz
  • Upload date:
  • Size: 12.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for tiny_pacs_identity-0.1.0.tar.gz
Algorithm Hash digest
SHA256 645ced0f5c7bf24f0a1bedf491f199ff0379914289262eb4f1174e79212ec922
MD5 1845bd58555cb2978b4aeca61b5ff297
BLAKE2b-256 5040a8223c7582203497728577d292290b862b098260bf062925ac9c063512ed

See more details on using hashes here.

Provenance

The following attestation bundles were made for tiny_pacs_identity-0.1.0.tar.gz:

Publisher: publish.yml on blanebf/tiny_pacs

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file tiny_pacs_identity-0.1.0-py3-none-any.whl.

File metadata

File hashes

Hashes for tiny_pacs_identity-0.1.0-py3-none-any.whl
Algorithm Hash digest
SHA256 dcde1a014fef3ec0c28b9e74aae0390b0921a2027c5e47d40fc40120a75944ab
MD5 52b7a1ef8acba63709757147faf8826a
BLAKE2b-256 4739a8f31d41f5c496cfc45f5ba5c3caf16238bcfd0b7ca8c59d9001f246499b

See more details on using hashes here.

Provenance

The following attestation bundles were made for tiny_pacs_identity-0.1.0-py3-none-any.whl:

Publisher: publish.yml on blanebf/tiny_pacs

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

This release

0.1.0 This release

2 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page