[Web-SIG] Python Web Modules - Version 0.4.1

[Phillip J. Eby]

At 11:24 AM 10/5/04 -0400, Ty Sarna wrote:
> > > * web.auth     - Identity and identification handling. Users may have
> > >  multiple access levels to multiple applications. Sign in and
> > > password reminder handling is built in.
> >
> > This could be middleware, though obviously it requires a lot of user
> > configuration.  If it's middleware you could share a single
> > authentication system with different WSGI applications.  Some
> > standardization in this case would be good -- starting with things as
> > simple as environ['auth.username'] holding the string username.  But for
> > now there's no standard, so you should use a custom prefix.
>
>I think this should be environ['REMOTE_USER'], per the CGI spec, so that
>same app could take auth either from the server (apache
>mod_auth_whatever or equivalent in other servers) or from middleware.

+1.