[Mailman-Developers] GSOC 2013 : Authenticated REST-API in Postorius/Django

Barry Warsaw barry at list.org
Fri Apr 19 02:16:47 CEST 2013


On Apr 18, 2013, at 01:56 PM, Rahul Gaur wrote:

>Talking about authentication, django-restframework has a wrapper for OAuth2
>out of the box, but I will have to check how to use non form data sources.

I keep hearing terrible things about OAuth2.

OAuth1 is nice and simple and there are plenty of good libraries in many
different languages to support it, so we want to think about which version of
OAuth to support carefully.  Maybe there are security issues involved.

>I know the support for python 3 is essential to the project, but as of now
>sticking I would prefer to sticking to Python 2.7.x for now.

As a practical matter, MM3.0 will be Python 2.7.  The core can't be ported
until restish is ported, and I don't have high hopes for Storm ever being
ported, so we'd have to also switch to SQLAlchemy or some other Python 3
compatible ORM (if there is another one).  That's way too much work for the
3.0 release.

What I would say though, is to be as careful as you can so that you will be
able to port to Python 3 when the time comes.  This means making your code
`python2.7 -3` clean and being *very* certain of your bytes vs. strings
story.  Essentially, you want to write your code to be bi-lingual without of
course using any Python 3 idioms.  This page may help:

https://wiki.ubuntu.com/Python/3

-Barry


More information about the Mailman-Developers mailing list