A framework for managing agent trust, such as public vs. private computers.
Project description
This project has tools for managing trusted user agents. For example, you might allow the user to indicate whether they are using a public or private computer and implement different policies for each. Or you might be using a two-factor authentication scheme, allowing the users to bypass the second factor on machines that they designate as trusted. This uses Django’s signed cookie facility and operates independently of sessions.
Short list of features:
request.agent.is_trusted tells you whether the request came from a trusted agent.
APIs to trust or revoke the agent that made a given request.
Global, per-user, and per-agent settings can set the duration of agent trust as well as an inactivity timeout.
Supports session-scoped agent trust for consistency of authorization policies.
Revoke all of a user’s previously trusted agents at any time.
The mechanisms by which a user is allowed to designate trusted agents is left entirely to clients of this library. For an application of this API using one-time passwords, see django-otp-agents, part of the django-otp suite.
Development
This project is built and managed with hatch. If you don’t have hatch, I recommend installing it with pipx: pipx install hatch.
pyproject.toml defines several useful scripts for development and testing. The default environment includes all dev and test dependencies for quickly running tests. The test environment defines the test matrix for running the full validation suite. Everything is executed in the context of the Django project in test/test_project.
As a quick primer, hatch scripts can be run with hatch run [<env>:]<script>. To run linters and tests in the default environment, just run hatch run check. This should run tests with your default Python version and the latest Django. Other scripts include:
manage: Run a management command via the test project. This can be used to generate migrations.
lint: Run all linters.
fix: Run tools that can automatically fix many linting errors.
test: Run all tests.
check: Run linters and tests.
warn: Run tests with all warnings enabled. This is especially useful for seeing deprecation warnings in new versions of Django.
cov: Run tests and print a code coverage report.
To run the full test matrix, run hatch run test:run. You will need multiple specific Python versions installed for this.
You can clean up the hatch environments with hatch env prune, for example to force dependency updates.
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
File details
Details for the file django_agent_trust-1.1.0.tar.gz.
File metadata
- Download URL: django_agent_trust-1.1.0.tar.gz
- Upload date:
- Size: 20.4 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: python-httpx/0.24.0
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | a920ff9492aab4a4edc6d83d948f82e7429f48ab1a7949b76dce510555536cb5 |
|
| MD5 | 648a751839fc23be539a02c1c1ee308b |
|
| BLAKE2b-256 | c0d257b6cbf52f60cc8b0ec6075a9604c3d6860933c7b6e5f6dd5c5136651591 |
File details
Details for the file django_agent_trust-1.1.0-py3-none-any.whl.
File metadata
- Download URL: django_agent_trust-1.1.0-py3-none-any.whl
- Upload date:
- Size: 12.2 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: python-httpx/0.24.0
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | 6226b6f5c9d03f22102fdd412b122f5b5062dd2473f7c642c7f742d309137ba4 |
|
| MD5 | c0821041e542f2a756a56c16e571a85c |
|
| BLAKE2b-256 | 33e38edd7e44ccd461ed8f7cd6a5cb89a1fbc55ec4bc781de1e9919240cc09a9 |
