[ANNOUNCE] Apache2::AuthAny

[ANNOUNCE] Apache2::AuthAny

am 23.03.2011 21:52:01 von Kim Goldov

--0015177409f65d5a98049f2c8861
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

I=92ve created a module we are calling Apache2::AuthAny. The module utilize=
s
other authentication modules or internal code, and provides a single =93GAT=
E=94
page where the end user can choose between authentication mechanisms.
AuthAny currently provides login to the =93Distribute System=94, which is u=
sed
to collect and disseminate influenza surveillance data. The authentication
mechanisms used for Distribute include Google, Shibboleth, and HTTP
authentication. Logout is supported for all mechanisms, including HTTP
authentication which is not normally possible.



We would like to release Apache2::AuthAny on CPAN. I=92m posting to this li=
st
per CPAN guidelines. Please respond if you have concerns about the
namespace, would like to review the code, or have suggestions of any sort.
Further documentation and a demo is currently running at
https://authany.cirg.washington.edu.



Kim

--0015177409f65d5a98049f2c8861
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: quoted-printable



I=92ve created a module we are calling Apache2::Auth=
Any. The
module utilizes other authentication modules or internal code, and provides=
a
single =93GATE=94 page where the end user can choose between authentication
mechanisms. AuthAny currently provides login to the =93Distribute System=94=
, which
is used to collect and disseminate influenza surveillance data. The
authentication mechanisms used for Distribute include Google, Shibboleth, a=
nd
HTTP authentication. Logout is supported for all mechanisms, including HTTP
authentication which is not normally possible.



=A0



We would like to release Apache2::AuthAny on CPAN. I=
=92m
posting to this list per CPAN guidelines. Please respond if you have concer=
ns
about the namespace, would like to review the code, or have suggestions of =
any
sort. Further documentation and a demo is currently running at ttps://authany.cirg.washington.edu/">https://authany.cirg.wa shington.edu >.



=A0



Kim




--0015177409f65d5a98049f2c8861--

Re: [ANNOUNCE] Apache2::AuthAny

am 25.03.2011 13:39:41 von Perrin Harkins

On Wed, Mar 23, 2011 at 4:52 PM, Kim Goldov wrote:
> We would like to release Apache2::AuthAny on CPAN.

Please go ahead!

How did you implement the logout for HTTP auth?

- Perrin

Re: [ANNOUNCE] Apache2::AuthAny

am 26.03.2011 01:15:22 von Kim Goldov

--0015177409f645451e049f579b2c
Content-Type: text/plain; charset=ISO-8859-1

AuthAny has its own Authen and Authz handlers, however instead of returning
a 401, these handlers redirect to a "GATE" page which contains links for
each provider. The "basic auth" type links point to a directory with a
random value appended. This random value is kept in the database and cycled
with each logout. Browsers will not send the authorization header to the new
directory. The AuthName is also appended with a random string to assure that
the challenge pop-up is presented each time. This logout mechanism and
logout mechanisms for other providers allows AuthAny to maintain its own
permanent cookie in its database for control over recognition or
authentication states.

Kim

On Fri, Mar 25, 2011 at 5:39 AM, Perrin Harkins wrote:

> On Wed, Mar 23, 2011 at 4:52 PM, Kim Goldov wrote:
> > We would like to release Apache2::AuthAny on CPAN.
>
> Please go ahead!
>
> How did you implement the logout for HTTP auth?
>
> - Perrin
>

--0015177409f645451e049f579b2c
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

AuthAny has its own Authen and Authz handlers, however instead of returning=
a 401, these handlers redirect to a "GATE" page which contains l=
inks for each provider. The "basic auth" type links point to a di=
rectory with a random value appended. This random value is kept in the data=
base and cycled with each logout. Browsers will not send the authorization =
header to the new directory. The AuthName is also appended with a random st=
ring to assure that the challenge pop-up is presented each time. This logou=
t mechanism and logout mechanisms for other providers allows AuthAny to mai=
ntain its own permanent cookie in its database for control over recognition=
or authentication states.


Kim

On Fri, Mar 25, 2011 at 5:39 AM, =
Perrin Harkins <
per=
rin@elem.com
> wrote:
le=3D"margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204);=
padding-left: 1ex;">
On Wed, Mar 23, 2011 at 4:52 PM, Kim Goldov < =3D"mailto:kgoldov@gmail.com">kgoldov@gmail.com> wrote:

> We would like to release Apache2::AuthAny on CPAN.



Please go ahead!



How did you implement the logout for HTTP auth?



- Perrin




--0015177409f645451e049f579b2c--

Re: [ANNOUNCE] Apache2::AuthAny

am 26.03.2011 15:49:25 von Perrin Harkins

On Fri, Mar 25, 2011 at 8:15 PM, Kim Goldov wrote:
> The "basic auth" type links point to a directory with a
> random value appended. This random value is kept in the database and cycled
> with each logout.

Very clever! Thanks for your contribution to CPAN.

- Perrin

Re: [ANNOUNCE] Apache2::AuthAny

am 26.03.2011 20:55:05 von Fred Moyer

Yes, please post a link to the source! A good place to post
development versions before uploading an 'official' release to CPAN is
GitHub - http://github.com

On Wed, Mar 23, 2011 at 1:52 PM, Kim Goldov wrote:
> I=92ve created a module we are calling Apache2::AuthAny. The module utili=
zes
> other authentication modules or internal code, and provides a single =93G=
ATE=94
> page where the end user can choose between authentication mechanisms.
> AuthAny currently provides login to the =93Distribute System=94, which is=
used
> to collect and disseminate influenza surveillance data. The authenticatio=
n
> mechanisms used for Distribute include Google, Shibboleth, and HTTP
> authentication. Logout is supported for all mechanisms, including HTTP
> authentication which is not normally possible.
>
>
>
> We would like to release Apache2::AuthAny on CPAN. I=92m posting to this =
list
> per CPAN guidelines. Please respond if you have concerns about the
> namespace, would like to review the code, or have suggestions of any sort=
..
> Further documentation and a demo is currently running at
> https://authany.cirg.washington.edu.
>
>
>
> Kim

Re: [ANNOUNCE] Apache2::AuthAny

am 28.04.2011 00:56:50 von Kim Goldov

--bcaec5299bed2ec17f04a1ee5b7a
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

I've gotten AuthAny to an acceptable state for review. It can be downloaded
from the demo site:

https://authany.cirg.washington.edu/download/

If you would like to install it, please be sure to read the "README".

There are a couple of problems with this release:

1) I created a "post-install.pl" script for use after the "make install"
step.
I'm sure there was a better way to handle this.

2) "make test" produces some errors that I'm not sure how to handle or
suppress.
My "DB.t" tests works correctly if the database has been set up (as noted
in the README), however some warnings are going to stdout.

Some other problems are listed under "ISSUES" in the AuthAny.pm perldoc:
https://authany.cirg.washington.edu/doc/AuthAny.html

Kim

On Sat, Mar 26, 2011 at 12:55 PM, Fred Moyer wrote=
:

> Yes, please post a link to the source! A good place to post
> development versions before uploading an 'official' release to CPAN is
> GitHub - http://github.com
>
> On Wed, Mar 23, 2011 at 1:52 PM, Kim Goldov wrote:
> > I=92ve created a module we are calling Apache2::AuthAny. The module
> utilizes
> > other authentication modules or internal code, and provides a single
> =93GATE=94
> > page where the end user can choose between authentication mechanisms.
> > AuthAny currently provides login to the =93Distribute System=94, which =
is
> used
> > to collect and disseminate influenza surveillance data. The
> authentication
> > mechanisms used for Distribute include Google, Shibboleth, and HTTP
> > authentication. Logout is supported for all mechanisms, including HTTP
> > authentication which is not normally possible.
> >
> >
> >
> > We would like to release Apache2::AuthAny on CPAN. I=92m posting to thi=
s
> list
> > per CPAN guidelines. Please respond if you have concerns about the
> > namespace, would like to review the code, or have suggestions of any
> sort.
> > Further documentation and a demo is currently running at
> > https://authany.cirg.washington.edu.
> >
> >
> >
> > Kim
>

--bcaec5299bed2ec17f04a1ee5b7a
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

I've gotten AuthAny to an acceptable state for review. It can be downlo=
aded from the demo site:

=A0 on.edu/download/">https://authany.cirg.washington.edu/downlo ad/

=
If you would like to install it, please be sure to read the "README&qu=
ot;.


There are a couple of problems with this release:

1) I created a=
"" script =
for use after the "make install" step.
I'm sure there was=
a better way to handle this.


2) "make test" produces some errors that I'm not sure how=
to handle or suppress.
My "DB.t" tests works correctly if the=
database has been set up (as noted
in the README), however some warnin=
gs are going to stdout.


Some other problems are listed under "ISSUES" in the AuthAny.=
pm perldoc:
tml">https://authany.cirg.washington.edu/doc/AuthAny.html

Kim >

On Sat, Mar 26, 2011 at 12:55 PM, Fred Moyer=
<fred@redho=
tpenguin.com
>
wrote:
le=3D"margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204);=
padding-left: 1ex;">
Yes, please post a link to the source! =A0A good place to post

development versions before uploading an 'official' release to CPAN=
is

GitHub - http://github.com<=
/a>



On Wed, Mar 23, 2011 at 1:52 PM, Kim Goldov <
mail.com">kgoldov@gmail.com> wrote:

> I=92ve created a module we are calling Apache2::AuthAny. The module ut=
ilizes

> other authentication modules or internal code, and provides a single =
=93GATE=94

> page where the end user can choose between authentication mechanisms.<=
br>
> AuthAny currently provides login to the =93Distribute System=94, which=
is used

> to collect and disseminate influenza surveillance data. The authentica=
tion

> mechanisms used for Distribute include Google, Shibboleth, and HTTP >
> authentication. Logout is supported for all mechanisms, including HTTP=


> authentication which is not normally possible.

>

>

>

> We would like to release Apache2::AuthAny on CPAN. I=92m posting to th=
is list

> per CPAN guidelines. Please respond if you have concerns about the

> namespace, would like to review the code, or have suggestions of any s=
ort.

> Further documentation and a demo is currently running at

> http=
s://authany.cirg.washington.edu
.

>

>

>

> Kim




--bcaec5299bed2ec17f04a1ee5b7a--