[mod_python] Controlling authentication at run-time

Diener, Edward Edward.Diener at loyaltyworks.com
Wed May 19 11:22:21 EDT 2004


>From other people's reply, that even when authentication is required by
the server the browser will automatically supply the user and password
during subsequent authentication requests after the first one, I do not
think that anything which I can do in my own authentication handler will
change the way the browser works.


That's "Just The Way It Works".  ("It" in this case, being the basic 
authentication that's implemented as part of Apache.)

There's an example in the docs 
(http://www.modpython.org/live/current/doc-html/tut-more-complicated.htm
l) 
that has instructions on setting up your own authentication handler 
using mod_python.  If I were you, I'd start there.  You could put 
whatever you wanted in there.

-Chris


Diener, Edward wrote:

>Why would the browser hide this action from me, producing no prompt ?
>
>Diener, Edward wrote:
>
>  
>
>>If Apache authentication is setup for files in a document directory 
>>through directives in an .htaccess file, once the user has entered
>>    
>>
>their
>  
>
>>user name and password and is allowed access to the file, they are no
>>longer prompted each subsequent time as long as their session is
>>    
>>
>active.
>
>The server continues to require the authentication for *each* access to
>the file. Your browser will provide it, but it will hide this action 
>from you; hence, no prompt.
>
>  
>
>>Is there a way to control this at run-time so that the user will be 
>>prompted for their user name and password in subsequent access to the 
>>file, using mod_python ?
>>    
>>
>
>You can avoid HTTP Basic Authentication entirely, and create a function
>that displays a login form before serving the file from a directory
that
>
>exists outside the document root.
>
>That's just one possibility, there are plenty of other ways to approach

>it. _______________________________________________
>Mod_python mailing list
>Mod_python at modpython.org 
>http://mailman.modpython.org/mailman/listinfo/mod_python
>
>_______________________________________________
>Mod_python mailing list
>Mod_python at modpython.org 
>http://mailman.modpython.org/mailman/listinfo/mod_python
>
>  
>





More information about the Mod_python mailing list