From 7dc3dbbad1edaac1ac16ef51040f9ff3138fad4e Mon Sep 17 00:00:00 2001 From: Tom Christie Date: Thu, 6 Mar 2014 09:02:46 +0000 Subject: Update docs --- api-guide/authentication.html | 7 +++++-- api-guide/serializers.html | 2 +- 2 files changed, 6 insertions(+), 3 deletions(-) (limited to 'api-guide') diff --git a/api-guide/authentication.html b/api-guide/authentication.html index 2265deb1..f8e75399 100644 --- a/api-guide/authentication.html +++ b/api-guide/authentication.html @@ -186,6 +186,7 @@
  • Django OAuth Toolkit
  • Django OAuth2 Consumer
  • JSON Web Token Authentication
    • +
  • Hawk HTTP Authentication
  • HTTP Signature Authentication
    • @@ -268,7 +269,7 @@ def example_view(request, format=None):

    Apache mod_wsgi specific configuration

    Note that if deploying to Apache using mod_wsgi, the authorization header is not passed through to a WSGI application by default, as it is assumed that authentication will be handled by Apache, rather than at an application level.

    If you are deploying to Apache, and using any non-session based authentication, you will need to explicitly configure mod_wsgi to pass the required headers through to the application. This can be done by specifying the WSGIPassAuthorization directive in the appropriate context and setting it to 'On'.

    -
    # this can go in either server config, virtual host, directory or .htaccess 
+
    # this can go in either server config, virtual host, directory or .htaccess
 WSGIPassAuthorization On
 
    
 
    
@@ -285,7 +286,7 @@ WSGIPassAuthorization On

    Note: If you use BasicAuthentication in production you must ensure that your API is only available over https. You should also ensure that your API clients will always re-request the username and password at login, and will never store those details to persistent storage.

    TokenAuthentication

    -

    This authentication scheme uses a simple token-based HTTP Authentication scheme. Token authentication is appropriate for client-server setups, such as native desktop and mobile clients.

    +

    This authentication scheme uses a simple token-based HTTP Authentication scheme. Token authentication is appropriate for client-server setups, such as native desktop and mobile clients.

    To use the TokenAuthentication scheme, include rest_framework.authtoken in your INSTALLED_APPS setting:

    INSTALLED_APPS = (
     ...
@@ -482,6 +483,8 @@ class ExampleAuthentication(authentication.BaseAuthentication):
 
    The Django OAuth2 Consumer library from Rediker Software is another package that provides OAuth 2.0 support for REST framework.  The package includes token scoping permissions on tokens, which allows finer-grained access to your API.
    
 
    JSON Web Token Authentication
    
 
    JSON Web Token is a fairly new standard which can be used for token-based authentication. Unlike the built-in TokenAuthentication scheme, JWT Authentication doesn't need to use a database to validate a token. Blimp maintains the djangorestframework-jwt package which provides a JWT Authentication class as well as a mechanism for clients to obtain a JWT given the username and password.
    
+
    Hawk HTTP Authentication
    
+
    The HawkREST library builds on the Mohawk library to let you work with Hawk signed requests and responses in your API. Hawk lets two parties securely communicate with each other using messages signed by a shared key. It is based on HTTP MAC access authentication (which was based on parts of OAuth 1.0).
    
 
    HTTP Signature Authentication
    
 
    HTTP Signature (currently a IETF draft) provides a way to achieve origin authentication and message integrity for HTTP messages. Similar to Amazon's HTTP Signature scheme, used by many of its services, it permits stateless, per-request authentication. Elvio Toccalino maintains the djangorestframework-httpsignature package which provides an easy to use HTTP Signature Authentication mechanism.
    diff --git a/api-guide/serializers.html b/api-guide/serializers.html index 97cff7b8..2536b149 100644 --- a/api-guide/serializers.html +++ b/api-guide/serializers.html @@ -332,7 +332,7 @@ class EventSerializer(serializers.Serializer): """ Check that the start is before the stop. """ - if attrs['start'] < attrs['finish']: + if attrs['start'] > attrs['finish']: raise serializers.ValidationError("finish must occur after start") return attrs -- cgit v1.2.3