HTTP Digest Authentication with Python

Ubuntu 11.04

Python 2.7.1

Webpy 0.36

Code:

• https://github.com/som4r/som4r/tree/master/robot

Status:

• 20120209 Funcionando modelo de autenticacao com php usando classe, falta enviar o token no header nas chamadas aos servicos seguros.
• 20120120 Funcionando o servico de autorizacão (verifica e responde o timeout dos tokens server e client)
• 20120119 Funcionando o servico de autenticacão (gera, grava e responde o token de acesso)
• 20120111 Foi criada a funcão robot_util.validate_token(auth_server,server_token,client_token). Ela retorna true ou false com base no status, de cada token (server e client), retornado pelo servidor de autenticacão em rdf:xml.
• 20120109 Ver documento Web Service REST Security
• 20120108 Funcionando exemplo com liburl2 no cliente. O servidor já verifica o timeout do nonce (5s), faz a validacão da resposta e inutiliza o nonce. (webpy_digest_authentication_2.py e get_digest_test_2.py)

Info:

• Wikipedia Digest Access Authentication
• OAuth 2.0

Links:

• Web.py
• Web.py Basic authentication
• Basic Authentication with Python
• Webpy User Authentication
• Python: Basic & Digest Authentication Handling
• hashlib — Secure hashes and message digests
• urllib2 — extensible library for opening URLs
• httplib — HTTP protocol client
• HTTP Authentication: Basic and Digest Access Authentication (descricão dos tipos de ataques)
• CherryPy Digest and Basic Authentication Tutorial
• Cherrypy Digest Auth POST problem (and solution!)
• Python Dict
• Python List

Links PHP:

• PHP HTTP Digest
• HTTP Basic and Digest authentication with PHP
• PHP Generation of MD5 hash for HTTP digest access authentication
• HTTP Authentication (descricao www-authenticate e authorization)