Helper authentication implementation

[pyeve]

Helper authentication implementation

[nicolaiarocci]

Token based authentication can be considered a specialized version of Basic Authentication, which is supported already. The Authorization header tag will contain the auth token in one of the two significant fields (usually the username field, while the password is either left blank or - if the client requires it - filled with an arbitrary string). Here's an example with curl:

curl -u my_api_token:x http://api.example.com/

curl wants a password, that's why there's a x following the auth token.

On the Eve/server side, your custom BasicAuth class (see v0.0.4 changelog) will receive the token as a username:

class Auth(BasicAuth):
    def check_auth(self, username, password, allowed_roles):
        return username == 'my_api_token'

Maybe I could add an example to the examples/security folder or, Eve could provide a helper TokenAuth class. Something that would work like this:

class Auth(TokenAuth):
    def check_auth(self, token, allowed_roles):
        return token == 'my_api_token'

[LarryEitel]

+1 :)