![](https://secure.gravatar.com/avatar/2c0bde3f5628f35390c42fe505b79da4.jpg?s=120&d=mm&r=g)
Hi ! I would like to implement some authentication mechanism on top of an existing nevow site using HTTP basic auth for a web services. I have looked at guard.py from nevow but is seems to be far more complex and I don't quite understand if it uses HTTP basic auth. I am not interested in setting up sessions or other stateful mechanisms. Since authorization may be required for POST or something like that, I would like to stick to simple HTTP auth basic since simple clients may not handle correctly redirection on POST. twisted.web2 authentication seems to be a good start, but I am using Nevow. Has someone already done a HTTP basic auth with nevow? In fact, my case is very similar to the one here: http://twistedmatrix.com/pipermail/twisted-web/2007-January/003270.html But, as I said, Nevow's guard.py seems best suited for web app authentication, not for web services. Can anyone confirm/infirm? Should I look into twisted.web2 and hack authentication from it to Nevow? Thanks.