922377 - Authenticate nucleus with django-browserid

Status: RESOLVED FIXED

(Websites :: Nucleus, defect, P4)

Description

[Justin Crawford [:hoosteeno] [:jcrawford]]

Once we have a steel thread of the end-to-end functionality required to publish release notes, let's swap out the authentication mechanism.

Comment 1

[Osmose [:osmose, :mkelly]]

This only applies to logging into the admin interface, correct? We're not thinking of using BrowserID for any sort've API access?

Comment 2

[Josh Mize [:jgmize]]

For read-only access to the API, no authentication is currently needed, as all information is public. For write access to the API, We currently only have token based authentication enabled, but it would be nice if someone could get an API token via a web interface after authenticating via persona.

We could also easily enable session-based API access as well, in which case someone could potentially log in via browserid to obtain write access to the API, which could be useful if someone were using the django-rest-framework html views to post information, either as an alternative to the standard django admin or (more likely) as a way of learning about how to write to the API. This could also be useful if we decided to implement a fancy html5 interface that made API calls via ajax down the road.

Comment 3

[Osmose [:osmose, :mkelly]]

That sounds like stuff we'd add in the future, so I propose keeping the scope of this particular bug to adding django auth to the admin interface. Agreed?

Comment 4

[[github robot]]

Commit pushed to master at https://github.com/mozilla/nucleus

https://github.com/mozilla/nucleus/commit/7cee4d7997fea4364e1f0ff8a4bb1b7c4f3cbd1a
Bug 922377: Support logging into the admin interface with Persona.

Currently points towards a django-browserid branch with un-merged code.
Once the feature lands in django-browserid's master branch we'll update
the submodule to reference it.

Comment 5

[Justin Crawford [:hoosteeno] [:jcrawford]]

This bug is resolved and merged into the nucleus/rna codebase.