Is this package unmaintained? The latest accepted PR was in September 2016 and there are a few pending PRs from up to March 2017. :thinking:
I tried using this package for API key authorization but there were a few missing features and some security concerns (keys stored in plaintext?).
I ended up creating djangorestframework-api-key with these missing features. A beta is already released to PyPI.
This package already has some popularity (and is featured in the DRF docs), so :
I'd be happy to bring the features back into this project.
However, I am not sure how to handle those that are breaking (e.g. a more secure generation and validation scheme by using a {token, secret key} pair).
Hi @manosim and all :wave:
Is this package unmaintained? The latest accepted PR was in September 2016 and there are a few pending PRs from up to March 2017. :thinking:
I tried using this package for API key authorization but there were a few missing features and some security concerns (keys stored in plaintext?).
I ended up creating djangorestframework-api-key with these missing features. A beta is already released to PyPI.
This package already has some popularity (and is featured in the DRF docs), so :
Glad to discuss!