This repository has been archived by the owner on Sep 28, 2022. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 19
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
11 changed files
with
223 additions
and
174 deletions.
There are no files selected for viewing
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,38 @@ | ||
Authentication & Security | ||
========================= | ||
|
||
Set `auth = true` in you .ini file to enable authentication. | ||
|
||
Ticket Auth | ||
----------- | ||
|
||
Nefertari currently supports the default Pyramid "auth ticket" cookie method of authentication. | ||
|
||
Token Auth | ||
---------- | ||
|
||
(under development) | ||
|
||
Visible fields in views | ||
----------------------- | ||
|
||
You can control which fields to display to both authenticated users and unauthenticated users by defining `_auth_fields` and `_public_fields` respectively in your models. | ||
|
||
ACL API | ||
------- | ||
|
||
For authorizing access to specific resources, Nefertari uses standard Pyramid access control lists. `See the documentation on Pyramid ACLs <http://docs.pylonsproject.org/projects/pyramid/en/1.5-branch/narr/security.html>`_ to understand how to extend and customize them. | ||
|
||
.. automodule:: nefertari.acl | ||
:members: | ||
|
||
CORS | ||
---- | ||
|
||
To enable CORS headers, set the following lines in your .ini file: | ||
|
||
.. code-block:: ini | ||
cors.enable = true | ||
cors.allow_origins = http://localhost | ||
cors.allow_credentials = true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.