django_authgroupex 0.1.0

django-authgroupex

This library provides a Django authentication backend based on Polytechnique.org’s auth-groupe-x SSO protocol.

Setup

The django-authgroupex package requires only a minimal pair of settings to work:

# Enable AuthGroupeX authentication backend
AUTHENTICATION_BACKENDS = (
    'django_authgroupex.auth.AuthGroupeXBackend',
    'django.contrib.auth.backends.ModelBackend',  # Optional
)

# Read secret key from file
AUTHGROUPEX_KEY = open('authgroupex.key', 'r').readline()

It should also be included in your projects urls.py file:

import django_authgroupex

authgroupex_view = django_authgroupex.AuthGroupeXUniqueView()
urlpatterns = patterns('',
    # Usual suspects here
    url(r'^xorgauth/', authgroupex_view.login_view, name='xorgauth'),
)

If you’re using the django.contrib.admin app, you may also override its login form:

from django.contrib import admin
admin.site.login = authgroupex_view.login_view

Settings

django-authgroupex provides the following settings:

• AUTHGROUPEX_KEY: Required, the secret key used to connect to an AuthGroupeX-compatible server.

• AUTHGROUPEX_ENDPOINT: The remote endpoint (an AuthGroupeX-compatible server). Default: https://www.polytechnique.org/auth-groupe-x/utf8

• AUTHGROUPEX_FIELDS: The list of profile fields to require upon connection; order matters. Default: ('username', 'firstname', 'lastname', 'email')

• AUTHGROUPEX_USER_MODEL: Model storing users. Default: auth.User

• AUTHGROUPEX_USER_GROUP: Model storing groups. Default: auth.Group

• AUTHGROUPEX_SUPERADMIN_PERMS: A list of AuthGroupeX permissions that enable the is_admin flag on this server. Default: ()

• AUTHGROUPEX_STAFF_PERMS: A list of AuthGroupeX permissions that enable the is_staff flag on this server.

• AUTHGROUPEX_DISABLE_DEADS: Whether a user connecting from a “dead” account should be switched to is_active=False Default: False

• AUTHGROUPEX_GROUP: Name of the AuthGroupeX group to use for a single-group website. Default: ''

• AUTHGROUPEX_MAP_GROUPS: Dict mapping an AuthGroupeX permission to a local group name. Default: {}

• AUTHGROUPEX_RETURN_URL: Name of the (local) return url for successful logins. Default: settings.LOGIN_URL

• AUTHGROUPEX_LOGIN_REDIRECT_URL: Name of the URL to redirect the user to after a successful login. Default: settings.LOGIN_REDIRECT_URL