Closed cam-stitt closed 11 years ago
Why would someone need an API key for AJAX calls on their own site? I should probably mention I didn't mean for this framework to grow into a public API interface for either CORS or REST calls.
That being said, if you're talking about making the AJAX authentication pluggable with a backend system, I'm on board.
Maybe I'll leave the API key one out for now. I'll setup a bit more structure around the current authentication system and see where we go from there.
:+1:
I am looking at creating some predefined authentication types to assist with people trying to quickly move towards having a fully working API solution. Currently I am looking at implementing the following:
Once I have these setup, I am going to have to work out where to implement the authentication. Currently I am thinking either in the current
authenticate
method or within the login_required decorator.This will also require a few default settings that can be changed to implement the different auth endpoints.
Just wanted to put this here to start a discussion.