[cgiapp] CGI::Application::Plugin::Authentication - new release

[Cees Hek <suppressed>]

I just put up a new version of the Authentication plugin.  This
version has lots of new features, and is looking pretty close for a
release on CPAN.  I would appreciate if people could give it a try,
and if the response is positive, then I will upload to CPAN.

http://cees.crtconsulting.ca/perl/modules/CGI-Application-Plugin-Authentication-0.02.tar.gz
http://cees.crtconsulting.ca/perl/modules/CGI-Application-Plugin-Authentication-0.02/

Major new features include a DBI driver, which allows you to
authenticate against pretty much any database layout.  Also a new
Cookie Store which means that the Session plugin is not required
anymore if you would rather use Cookies to store the authentication
information.  The nice thing about using Cookies is that no server
side storage of any kind is required for the authentication plugin, as
the username and timeout information is encoded into the cookie value.

There are also two people that are already working on building more
Drivers that will be released separately.  The drivers that I know are
being worked on include a Class::DBI driver, and an LDAP and Radius
Driver.  If anyone has any specific requests for Drivers or wants to
build one, please let me know and I'll be glad to help out.  Potential
new Drivers include:  DBM, HTPasswd, Unix passwd, NTLM, CSV, etc...

Other things that could be worked on are new Stores that are able to
decode Ticket Based authentication, or a Store that recognizes
$ENV{REMOTE_USER} and allows access based on that.  A Store basically
just stores an authenticated user's username along with some other
information.  So if you are using ticket based authentication
(external to this plugin), then the ticket is effectively the store,
since it identifies a unique user that is logged in.  So if you build
a Store module that is able to verify and decode a ticket, then that
user will be considered logged in, and they will be let into the
protected runmodes.  In this case no Driver will be necesary, since
the username and password are checked somewhere else by the ticketing
system.

Here is the full list of changes in the new version:

    New Drivers
    - DBI Driver

    New Stores
    - Cookie store (requires no server side storage)

    New Features
    - Added field encoding support for datastores that
      keep passwords in an encoded format, like Unix crypt,
      or MD5.
    - Added encoders for crypt, MD5 and SHA1
    - Added some more methods to Driver.pm that can simplify
      the building of new Driver modules (find_option, encode,
      check_encoded, strip_field_names)
    - Added lots more tests to the test suite

    Bug Fixes
    - Fixed Generic Driver when using array of arrays method.
    - Options no longer get clobbered by the modules.

---------------------------------------------------------------------
Web Archive:  http://www.mail-archive.com/suppressed/
              http://marc.theaimsgroup.com/?l=cgiapp&r=1&w=2
To unsubscribe, e-mail: suppressed
For additional commands, e-mail: suppressed