paste.auth.multi – Authentication via one of multiple methods

Authentication via Multiple Methods

In some environments, the choice of authentication method to be used depends upon the environment and is not “fixed”. This middleware allows N authentication methods to be registered along with a goodness function which determines which method should be used. The following example demonstrates how to use both form and digest authentication in a server stack; by default it uses form-based authentication unless *authmeth=digest is specified as a query argument.

>>> from paste.auth import form, cookie, digest, multi
>>> from paste.wsgilib import dump_environ
>>> from paste.httpserver import serve
>>>
>>> multi = multi.MultiHandler(dump_environ)
>>> def authfunc(environ, realm, user):
...     return digest.digest_password(realm, user, user)
>>> multi.add_method('digest', digest.middleware, "Test Realm", authfunc)
>>> multi.set_query_argument('digest')
>>>
>>> def authfunc(environ, username, password):
...     return username == password
>>> multi.add_method('form', form.middleware, authfunc)
>>> multi.set_default('form')
>>> serve(cookie.middleware(multi))
serving on...

Module Contents

class paste.auth.multi.MultiHandler(application)

Multiple Authentication Handler

This middleware provides two othogonal facilities:

  • a manner to register any number of authentication middlewares

  • a mechanism to register predicates which cause one of the registered middlewares to be used depending upon the request

If none of the predicates returns True, then the application is invoked directly without middleware