Authentication should be in place for all API calls about marvin HOT 4 CLOSED

Comment by havok2063
Saturday Oct 08, 2016 at 22:23 GMT

I have turned on the API authentication at Utah. And added some auth stuff into the Interaction class. By default, with no auth specified, requests will look for authentication credentials in a local .netrc file. So I didn't have to do much to implement this. I also added in the future option of changing the authentication to oauth.

I've also changed the request to use a Session instead. This will open and maintain a single request session so all requests use one tcp connection. I'm not sure if we want to do this since there's no way of dictating when to close the session. See
http://docs.python-requests.org/en/master/user/advanced/#request-and-response-objects
and
https://en.wikipedia.org/wiki/HTTP_persistent_connection

I've also added in optional session caching into the requests, using a new library called CacheControl. If Marvin can import this package it will use it, otherwise no. Go here
http://docs.python-requests.org/en/master/community/recommended/
and install / upgrade both CacheControl and Requests-Toolbelt

from marvin.

Comment by albireox
Sunday Oct 09, 2016 at 02:04 GMT

This looks good to me. I'm not sure about the single request session. I'll read the links, and let's talk about it next week on the call.

Does the interaction automatically prompts you for user and password if it cannot find them in the netrc file and, if introduced, saves them there?

from marvin.

Comment by havok2063
Tuesday Oct 11, 2016 at 15:58 GMT

Yeah, I'm not sure either about the request session. If we can figure out a nice way to close them after X time, then maybe it can help us. Otherwise, we can go back to ad hoc request calls, where each get and post is a separate tcp connection.

The Interaction raises a BrainAPIAuthError if the authentication fails and in the message tells you to create or check your credentials in your netrc file. With the way things are set up now, when a user tries to do something remotely without auth, it fails, a Warning gets generated when attempting to get the config.urlmap for the first time but keeps going, then fails inside whatever code with a MarvinError, cannot make remote calls, no urlmap.

from marvin.

This next step here is to do Oauth authentication, with Trac and API key. Closing this ticket and reopening a new one.

from marvin.