snok / django-auth-adfs

A Django authentication backend for Microsoft ADFS and AzureAD
http://django-auth-adfs.readthedocs.io/
BSD 2-Clause "Simplified" License
271 stars 99 forks source link

Readonly database access mode #302

Closed hterik closed 1 year ago

hterik commented 1 year ago

As a developer, i would like to use django-auth-adfs, while only having readonly access to the database.

Today this is not possible, because the package is writing things into the DB, like last time of login and session identifiers.

Changing the django SESSION_ENGINE to file is not enough, there are many other paths inside adfs that expect write-access. I haven't done a full investigation on exactly what it writes, just observed that it does.

Upvote & Fund

Fund with Polar

JonasKs commented 1 year ago

This is not something I want to add personally, it is a lot of functionality around users, sessions etc.

Sorry.

tim-schilling commented 1 year ago

If there are minimal changes for us to support a hook that could support this, then maybe. However, judging from your description of "there are many other paths inside adfs that expect write-access", this seems out of scope for what can be invested for development.