diff options
| author | Tom Christie | 2013-02-07 21:23:10 +0000 | 
|---|---|---|
| committer | Tom Christie | 2013-02-07 21:23:10 +0000 | 
| commit | 7ffb2435ca87676173e8c634401a9c871b1e2087 (patch) | |
| tree | 7198f21e46027bb53b0388601b6a2d9b5d06bc34 /docs/api-guide/authentication.md | |
| parent | 60b1591efa7ddcf3ae7fa2982102d457fb74b388 (diff) | |
| download | django-rest-framework-7ffb2435ca87676173e8c634401a9c871b1e2087.tar.bz2 | |
Add link to djangorestframework-digestauth
Diffstat (limited to 'docs/api-guide/authentication.md')
| -rw-r--r-- | docs/api-guide/authentication.md | 16 | 
1 files changed, 14 insertions, 2 deletions
| diff --git a/docs/api-guide/authentication.md b/docs/api-guide/authentication.md index 59afc2b9..9c899f17 100644 --- a/docs/api-guide/authentication.md +++ b/docs/api-guide/authentication.md @@ -137,7 +137,8 @@ Unauthenticated responses that are denied permission will result in an `HTTP 401  **Note:** If you use `TokenAuthentication` in production you must ensure that your API is only available over `https` only. -======= +--- +  If you want every user to have an automatically generated Token, you can simply catch the User's `post_save` signal.      @receiver(post_save, sender=User) @@ -210,7 +211,16 @@ The following example will authenticate any incoming request as the user given b                  raise authenticate.AuthenticationFailed('No such user')              return (user, None) -                 + +--- + +# Third party packages + +The following third party packages are also available. + +## Digest Authentication + +HTTP digest authentication is a widely implemented scheme that was intended to replace HTTP basic authentication, and which provides a simple encrypted authentication mechanism. [Juan Riaza][juanriaza] maintains the [djangorestframework-digestauth][djangorestframework-digestauth] package which provides HTTP digest authentication support for REST framework.  [cite]: http://jacobian.org/writing/rest-worst-practices/  [http401]: http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.2 @@ -221,3 +231,5 @@ The following example will authenticate any incoming request as the user given b  [throttling]: throttling.md  [csrf-ajax]: https://docs.djangoproject.com/en/dev/ref/contrib/csrf/#ajax  [mod_wsgi_official]: http://code.google.com/p/modwsgi/wiki/ConfigurationDirectives#WSGIPassAuthorization +[juanriaza]: https://github.com/juanriaza +[djangorestframework-digestauth]: https://github.com/juanriaza/django-rest-framework-digestauth | 
