django-secure-js-login 0.2.0

The procedure:

#. user input a password

tryout

e.g.:

~ $ virtualenv secure-js-login-env
~ $ cd secure-js-login-env
~/secure-js-login-env $ source bin/activate

# install secure-js-login as "editable" to have access to example project server and unittests:

(secure-js-login-env)~/secure-js-login-env $ pip install -e git+git://github.com/jedie/django-secure-js-login.git#egg=django-secure-js-login

run example project server:
{{{
(secure-js-login-env)~/secure-js-login-env $ cd src/django-secure-js-login/
(secure-js-login-env)~/secure-js-login-env/src/django-secure-js-login $ ./run_example_server.sh

run inittests:

(secure-js-login-env)~/secure-js-login-env/src/django-secure-js-login $ ./runtests.py

to run the Live-Server-Tests, install selenium e.g.:

(secure-js-login-env)~/secure-js-login-env/src/django-secure-js-login $ pip install selenium
(secure-js-login-env)~/secure-js-login-env/src/django-secure-js-login $ ./runtests.py

Version compatibility

(These are the unittests variants. Maybe other versions are compatible, too.)

changelog

• v0.2.0 - 10.05.2015:

  • increase default PBKDF2 iteration after test on a Raspberry Pi 1

  • more unitests

  • Honypot login raise “normal” form errors

  • code cleanup

  • Docu update

• v0.1.0 - 06.05.2015:

  • initial release as reuseable app

  • Use PBKDF2

• 03.05.2015:

  • Split from PyLucid CMS ‘auth’ plugin

• 03.2010:

  • Use ajax request via jQuery (de)

• 11.07.2007:

  • New SHA challenge response procedure (de)

• 01.06.2005:

  • first implementation of a MD5 login in PyLucid (de)

info links

• Python-Forum Threads (de):

  • Digest auth als Alternative? (03.2010)

  • Sinn oder Unsinn des PyLucids Secure-JS-Login… (12.2006)

  • Wie Session-Hijacking verhindern? (12.2006)

• Diskussion auf de.comp.lang.python (08.2006)

project links

Used JavaScript Implementations

• SHA1 - JavaScript implementation of the Secure Hash Algorithm, SHA-1, as defined in FIPS 180-1

  • http://pajhome.org.uk/crypt/md5/sha1.html

  • Implemented by Paul Johnston

  • Distributed under the BSD License

  • Stored under: secure_js_login/static/secure_js_login/sha.js

• PBKDF2 - JavaScript implementation of Password-Based Key Derivation Function 2 as defined in RFC 2898

  • http://anandam.name/pbkdf2/

  • Implemented by Parvez Anandam

  • Distributed under the BSD license

  • Stored under: secure_js_login/static/secure_js_login/pbkdf2.js

contact

Come into the conversation, besides the github communication features: