hirokiky / django-basicauth Goto Github PK

Hi, can you tag the 0.5.1 release?

Thanks

The decorator function to import is @basic_auth_required, not @basic_auth_decorator.

Hi,

could you please provide an example how to use django-basicauth with class-based-views?

I just want to have one CBV decorated. I would like to avoid a middleware.

Thank you

Hi,

I'm interested in getting a middleware version of this feature; are you interesting in my contributing it?

If so, do you have any speicifc expectations on incoming pull requests?

Thanks!

https://docs.djangoproject.com/en/1.11/topics/http/middleware/#upgrading-pre-django-1-10-style-middleware

from .basicauthutils import validate_request
from .response import HttpResponseUnauthorized
from django.utils.deprecation import MiddlewareMixin

class BasicAuthMiddleware(MiddlewareMixin):
    def process_request(self, request):
        if not validate_request(request):
            return HttpResponseUnauthorized()
        return None

See #7

Hi.
Thanks for this package. I am using it to apply a basic auth restriction to staging deploys for a couple of my websites.

I host my sites on AWS behind an Elastic Load Balancer (ELB). When you set up an ELB, you give it a 'health check' URL. The Load Balancer periodically requests this URL and checks the responses status is 200 OK to ensure the server is 'healthy'. If it gets anything other than a 200 OK, it marks the server as unhealthy. The load balancer doesn't have the option to pass auth credentials.

What this means is I want to set up my staging deploys with basic auth applied to every endpoint except for one which isn't protected so that the load balancer can ping that endpoint and get a 200 OK rather than a 401 Unauthorized. Every other route should be behind basic auth. For obvious reasons, it is cumbersome to decorate every view other than one with @basic_auth_required so they way I've done this is by subclassing BasicAuthMiddleware so that I can turn on basic auth for everything but then whitelist one endpoint using a regex. I've taken inspiration from the old django-moat package which is no longer maintained but did have this feature.
example: https://github.com/DemocracyClub/EveryElection/blob/master/every_election/apps/core/middleware.py

2 questions:

1. Is there a better way of doing this that I am missing?
2. If not, would you accept a PR to add this feature to the package?

Cheers