HomeSoftware Heritage

auth: Improve login management and configuration

Description

auth: Improve login management and configuration

Declare login and logout URLs in django settings:

  • basic authentication is used in development mode and when running cypress tests
  • OIDC authentication is used in production mode and when running Python tests (in terms of login/logout URLs)

Do not expose basic authentication login URL in production webapp
for obvious security reasons.

Align query parameter name for redirection after login in basic
authentication backend with the OIDC one, it is now named next_path.

Simplify some code in django templates.

Remove documentation about API authentication when using the basic
django backend as no bearer token can be generated in that case.

Details

Provenance
anlambertAuthored on Sep 8 2022, 1:51 PM
anlambertPushed on Sep 13 2022, 1:23 PM
Differential Revision
D8420: auth: Improve login management and configuration
Parents
rDWAPPS13158c81d2a5: Ignore empty lines from swh-graph instead of crashing
Branches
Unknown
Tags
Unknown
Build Status
Buildable 31494
Build 49266: test-and-buildJenkins console · Jenkins