aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorFederico Capoano2013-01-16 17:17:07 +0100
committerFederico Capoano2013-01-16 17:17:07 +0100
commitf19d4ea8b126650bc23af822acd3d6af9c7fb632 (patch)
treeaa42d87c730c21ad9e0659a70ffc39179320e712
parent55cc7452546f44d48fd68b81eebc1eed75eff1df (diff)
downloaddjango-rest-framework-f19d4ea8b126650bc23af822acd3d6af9c7fb632.tar.bz2
Update docs/api-guide/authentication.md
refined mod_wsgi
-rw-r--r--docs/api-guide/authentication.md5
1 files changed, 3 insertions, 2 deletions
diff --git a/docs/api-guide/authentication.md b/docs/api-guide/authentication.md
index e91f6c2e..330cf7a4 100644
--- a/docs/api-guide/authentication.md
+++ b/docs/api-guide/authentication.md
@@ -62,14 +62,14 @@ Or, if you're using the `@api_view` decorator with function based views.
## Apache mod_wsgi Specific Configuration
-Unlike other HTTP headers, the authorisation header is not passed through to a WSGI application by default. This is the case as doing so could leak information about passwords through to a WSGI application which should not be able to see them when Apache is performing authentication...
+Unlike other HTTP headers, the authorisation header is not passed through to a WSGI application by default. This is the case as doing so could leak information about passwords through to a WSGI application which should not be able to see them when Apache is performing authentication.
If it is desired that the WSGI application be responsible for handling user authentication, then it is necessary to explicitly configure mod_wsgi to pass the required headers through to the application. This can be done by specifying the WSGIPassAuthorization directive in the appropriate context and setting it to 'On'.
# this can go in either server config, virtual host, directory or .htaccess
WSGIPassAuthorization On
-[cite]: http://code.google.com/p/modwsgi/wiki/ConfigurationDirectives#WSGIPassAuthorization
+[Reference to official mod_wsgi documentation][mod_wsgi_official]
# API Reference
@@ -157,3 +157,4 @@ To implement a custom authentication policy, subclass `BaseAuthentication` and o
[permission]: permissions.md
[throttling]: throttling.md
[csrf-ajax]: https://docs.djangoproject.com/en/dev/ref/contrib/csrf/#ajax
+[mod_wsgi_official]: http://code.google.com/p/modwsgi/wiki/ConfigurationDirectives#WSGIPassAuthorization