documentation for Auth?

[dvhassel]

Hi,

is there any documentation floating around on using IIIF Auth with Loris? I'm trying to get this working with the SimpleFSResolver, without any luck so far unfortunately.

I have created the rules.json file for my test image (test1.jp2 and test1.rules.json live in the same directory) and added use_auth_rules=True to the [resolver] section of loris2.conf.

This is being picked up as I can see in the log: [DEBUG]: resolver.use_auth_rules=True

However, test1.jp2/info.json does include the extraInfo from test1.rules.json. It doesn't seem to be a caching issue.

Any suggestions?

[bcail]

@dvhassel have you set up the authorizer section of your loris2.conf? This is an example config from webapp.py: config['authorizer'] = { "impl": "loris.authorizer.RulesAuthorizer", "cookie_secret": b"4rakTQJDyhaYgoew802q78pNnsXR7ClvbYtAF1YC87o", "token_secret": b"hyQijpEEe9z1OB9NOkHvmSA4lC1B4lu1n80bKNx0Uz0=", "roles_key": "roles", "id_key": "sub", }

[dvhassel]

hi, no I didn't. I have this now in loris2.conf:

[authorizer]
impl = 'loris.authorizer.RulesAuthorizer'
cookie_secret = b'4rakTQJDyhaYgoew802q78pNnsXR7ClvbYtAF1YC87o'
token_secret = b'hyQijpEEe9z1OB9NOkHvmSA4lC1B4lu1n80bKNx0Uz0='
roles_key = 'roles'
id_key = 'sub'

The rules.json:

{
    "extraInfo": 
    {
        "service" : {
        "@context": "http://iiif.io/api/auth/1/context.json",
        "@id": "http://<ip-to-loris>/clickthrough",
            "profile": "http://iiif.io/api/auth/1/clickthrough",
            "label": "Terms of Use for Example Institution",
            "header": "Restricted Material with Terms of Use",
            "description": "<span>... terms of use ... </span>",
            "confirmLabel": "I Agree",
            "failureHeader": "Terms of Use Not Accepted",
        "failureDescription": "You must accept the terms of use to see the content.",
         "service": [
                {
                    "@context": "http://iiif.io/api/auth/1/context.json", 
                    "@id": "http://<ip-to-loris>/token",
                    "profile": "http://iiif.io/api/auth/1/token"
                }
            ]
        }
    }
}

in the log I can see this now: (loris.authorizer) [DEBUG]: Called is_protected with {'extraInfo': {'service (...)

but nothing in /info.json.

Step-by-step I guess?