[Catalog-sig] OpenID login to PyPI

[M.-A. Lemburg]

"Martin v. Löwis" wrote:
>> Well, python-openid is written in Python, so it should be possible
>> to add whatever special functionality you need.
> 
> For this, I would like to see contributions.
> 
> I found myself that it is absolutely necessary to understand the actual
> message flow,  so I couldn't have used the package before implementing
> a client myself - perhaps I might now be able to understand how to use
> it. For mod_auth_openid, I still cannot grasp how to use it.
> 
>> With mod_auth_openid, you'd use a separate login page for the
>> OpenID login, so there wouldn't be a mixup between the two
>> variants.
> 
> That would be unfortunate UI clutter, IMO.
> 
>> Since you were looking for simplification of the used code,
>> it may be worthwhile looking at these two options to outsource
>> the complexity into a 3rd party tool. Both come with their own
>> session database to handle the authentication process sessions.
> 
> Please go ahead and do so.
>
>> Note that I'm only suggesting to look at these things in
>> order to simplify the implementation.
> 
> At least for python-openid, my feeling would be that it is actually
> more complicated to use the library than to write my own.
> 
> For mod_auth_openid, a shallow glance also looks like using it
> would be quite some challenge.

Like I said in my email: I'm not a fan of OpenID and don't
understand why so much complexity has to be added just to
avoid letting a browser fill in the username/password
automatically.

My suggestions were only targeting your statement that you
want to keep the code simple. If you don't think that's
possible using python-openid or Paul's suggestion to
use mod_auth_openid, that's fine.

Regarding contributing to the PyPI implementation: I'm not
aware of how this could be done. To me, PyPI appears to be
a closed application that is solely under your control.

After some searching I did find what appears to be the
repository of the currently used code base:

https://svn.python.org/packages/trunk/pypi/

However, it is not clear how this is deployed on the
pypi.python.org server. Is there a staging installation
to be used for testing ?

-- 
Marc-Andre Lemburg
eGenix.com

Professional Python Services directly from the Source  (#1, Nov 18 2009)
>>> Python/Zope Consulting and Support ...        http://www.egenix.com/
>>> mxODBC.Zope.Database.Adapter ...             http://zope.egenix.com/
>>> mxODBC, mxDateTime, mxTextTools ...        http://python.egenix.com/
________________________________________________________________________

::: Try our new mxODBC.Connect Python Database Interface for free ! ::::


   eGenix.com Software, Skills and Services GmbH  Pastor-Loeh-Str.48
    D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg
           Registered at Amtsgericht Duesseldorf: HRB 46611
               http://www.egenix.com/company/contact/