gvalkov / tornado-http-auth

Digest and basic authentication for Tornado
Apache License 2.0
19 stars 12 forks source link

attempting compatibility with PAM authentication #10

Open asmodehn opened 3 years ago

asmodehn commented 3 years ago

Not sure if it is suitable here to fully depend on pamela or not.

It seems however the current design auth(username) -> password cannot coexist with the arguably safer PAM auth(username, password) -- delayed --> Bool behavior, given that both usecases can have a second optional argument with different semantics...

So the alternative to not depend on pamela, is to restrict the design to support only a auth(username, password) -> Bool behavior, and current examples become invalid... -> new major version ?