Skip to main content

Django application for FIDO protocol

Project description

django-fido

Build Status codecov

Django application for FIDO protocol

Django-fido provides basic components for FIDO 2 authentication - model to store user's FIDO 2 authenticator data and basic views.

Table of Contents

Dependencies

  • Python 3.5 and higher
  • Django >= 1.11

Configuration

  1. Add django_fido to INSTALLED_APPS.

  2. Add django_fido.backends.Fido2AuthenticationBackend to AUTHENTICATION_BACKENDS.

  3. Link django-fido URLs into your urls.py:

    urlpatterns += [
       url(r'', include('django_fido.urls')),
    ]
    
  4. If you wish, set string variable DJANGO_FIDO_RP_NAME.

One step authentication

You can also decide to use one step authentication. In this case, you will use just one authentication form, that will collect username, password and FIDO2 credentials. In addition to the configuration above, you also need to:

  1. Set DJANGO_FIDO_TWO_STEP_AUTH to False.
  2. Replace django_fido.backends.Fido2AuthenticationBackend with django_fido.backends.Fido2GeneralAuthenticationBackend in AUTHENTICATION_BACKENDS.
  3. Set DJANGO_FIDO_AUTHENTICATION_BACKENDS to the list of your additional authentication backends, if you use others than django.contrib.auth.backends.ModelBackend.
  4. Set data-autosubmit-off attribute on the form element of your login page.

Please note that your login form must have a field named username, even if your USERNAME_FIELD is not username.

Changes

See changelog.

Testing

Use tox to run tests

tox

License

See LICENSE.

Changelog

0.21

  • Create FIDO errors list when needed unless it already exists
  • Clear FIDO errors list before each registration or authentication request

0.20

  • Fix Django 3.0 compatibility issues in templates

0.19

  • Added class attribute attestation_types to Fido2ViewMixin to specify allowed attestation types during registration.
  • Set default value of setting DJANGO_FIDO_AUTHENTICATION_BACKENDS to list containing django.contrib.auth.backends.ModelBackend

0.18

  • Fix issue caused by default value of DJANGO_FIDO_AUTHENTICATION_BACKENDS. It is now empty list.

0.17

  • BREAKING Replace Fido2ModelAuthenticationBackend with more general Fido2GeneralAuthenticationBackend.

0.16

  • BREAKING Authenticator label has to be unique for user. This can potentialy break if you have multiple tokens for user.
  • Add authenticator admin.
  • Add one step authentication.

0.15

  • Add DJANGO_FIDO_RP_NAME setting.
  • Add back autosubmit on login view.
  • Display error in login view on server request error.

0.14

  • Add label to Authenticator model.
  • Remove autosubmit on registration view.
  • Update JS dependencies.

0.13

  • Support fido2 0.6-0.8.
  • Add support for python 3.8.
  • Fixup annotations.

0.12

  • Fix dependencies (add webpack-cli).

0.11

  • Fix webpack output path.

0.10

  • Fix dependencies (add webpack).

0.9

  • Refactor JS code.
  • Update setup.
  • Add bumpversion.

0.8

  • Fix JS translation lazynes.
  • For empty values, submit button reload page.

0.7

  • Add credential ID field.
  • Drop credential_data field.
  • Update error messages.
  • Mark django-fido as typed.
  • Add JS hooks.

0.6

  • Use FIDO 2 instead of U2F.
  • Drop python 2.7.
  • Add annotations and mypy check.
  • Move repository to a CZ.NIC account.

0.5

  • Fix JS translation lazynes

0.4

  • Update JS messages.
  • Drop unused polint environment in tox.

0.3

  • Store attestation certificate in database #6
  • Install package data #7

0.2

  • Accept any arguments in BaseU2fRequestView.get
  • Add czech translations
  • Fix links in README

0.1

  • Initial version

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

django-fido-0.21.tar.gz (292.0 kB view details)

Uploaded Source

Built Distribution

django_fido-0.21-py3-none-any.whl (266.1 kB view details)

Uploaded Python 3

File details

Details for the file django-fido-0.21.tar.gz.

File metadata

  • Download URL: django-fido-0.21.tar.gz
  • Upload date:
  • Size: 292.0 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/3.1.1 pkginfo/1.5.0.1 requests/2.23.0 setuptools/45.2.0 requests-toolbelt/0.9.1 tqdm/4.43.0 CPython/3.7.5

File hashes

Hashes for django-fido-0.21.tar.gz
Algorithm Hash digest
SHA256 5d0a72c39669982b82ea3bd7e1e3055e2561f0c6e243beb6c7bce9ac8fb6c10c
MD5 bcb410017b5c25656f26de0056887ac1
BLAKE2b-256 f63977cd8c4d38b27b1bbcbf348365ab0ed463420db95b9b8372b074dd83ec8d

See more details on using hashes here.

Provenance

File details

Details for the file django_fido-0.21-py3-none-any.whl.

File metadata

  • Download URL: django_fido-0.21-py3-none-any.whl
  • Upload date:
  • Size: 266.1 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/3.1.1 pkginfo/1.5.0.1 requests/2.23.0 setuptools/45.2.0 requests-toolbelt/0.9.1 tqdm/4.43.0 CPython/3.7.5

File hashes

Hashes for django_fido-0.21-py3-none-any.whl
Algorithm Hash digest
SHA256 a41ca7f34908bf5f8a8766449413fb3b0009293803e0ea6be160a817a73d5200
MD5 fa2eacf0e3e01dc03da4f843b2a16032
BLAKE2b-256 7fab2c411e245b73a7e9be3397d28209e1e1ed1a65f0e82a80ffec3a862729e9

See more details on using hashes here.

Provenance

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page