aboutsummaryrefslogtreecommitdiffstats
path: root/docs/api-guide/authentication.md
diff options
context:
space:
mode:
authorTom Christie2013-02-07 21:23:10 +0000
committerTom Christie2013-02-07 21:23:10 +0000
commit7ffb2435ca87676173e8c634401a9c871b1e2087 (patch)
tree7198f21e46027bb53b0388601b6a2d9b5d06bc34 /docs/api-guide/authentication.md
parent60b1591efa7ddcf3ae7fa2982102d457fb74b388 (diff)
downloaddjango-rest-framework-7ffb2435ca87676173e8c634401a9c871b1e2087.tar.bz2
Add link to djangorestframework-digestauth
Diffstat (limited to 'docs/api-guide/authentication.md')
-rw-r--r--docs/api-guide/authentication.md16
1 files changed, 14 insertions, 2 deletions
diff --git a/docs/api-guide/authentication.md b/docs/api-guide/authentication.md
index 59afc2b9..9c899f17 100644
--- a/docs/api-guide/authentication.md
+++ b/docs/api-guide/authentication.md
@@ -137,7 +137,8 @@ Unauthenticated responses that are denied permission will result in an `HTTP 401
**Note:** If you use `TokenAuthentication` in production you must ensure that your API is only available over `https` only.
-=======
+---
+
If you want every user to have an automatically generated Token, you can simply catch the User's `post_save` signal.
@receiver(post_save, sender=User)
@@ -210,7 +211,16 @@ The following example will authenticate any incoming request as the user given b
raise authenticate.AuthenticationFailed('No such user')
return (user, None)
-
+
+---
+
+# Third party packages
+
+The following third party packages are also available.
+
+## Digest Authentication
+
+HTTP digest authentication is a widely implemented scheme that was intended to replace HTTP basic authentication, and which provides a simple encrypted authentication mechanism. [Juan Riaza][juanriaza] maintains the [djangorestframework-digestauth][djangorestframework-digestauth] package which provides HTTP digest authentication support for REST framework.
[cite]: http://jacobian.org/writing/rest-worst-practices/
[http401]: http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.2
@@ -221,3 +231,5 @@ The following example will authenticate any incoming request as the user given b
[throttling]: throttling.md
[csrf-ajax]: https://docs.djangoproject.com/en/dev/ref/contrib/csrf/#ajax
[mod_wsgi_official]: http://code.google.com/p/modwsgi/wiki/ConfigurationDirectives#WSGIPassAuthorization
+[juanriaza]: https://github.com/juanriaza
+[djangorestframework-digestauth]: https://github.com/juanriaza/django-rest-framework-digestauth