[Twisted-web] HTTP-AUTH for web2 / Kudos on web2's operation
L. Daniel Burr
ldanielburr at mac.com
Fri Nov 18 16:54:19 MST 2005
On Fri, 18 Nov 2005 15:47:02 -0600, Clark C. Evans <cce at clarkevans.com>
> Thank you for taking time to discuss this more. I think I disagree that
> twisted core currently is, or should be an object publishing system.
> It's ok if Nevow is an object publishing system; but you should not
> restrict the applications of twisted.web2 to object publishing.
> By an "object publishing system", I mean a system where every object
> in the system is a Resource, and hence has a *unique* URL. That is,
> if I have two distinct objects in the system, they have different
> URLs; and if I have two URLs that refer to actual resources in the
> system, they refer to different objects.
> look like (to phrase it with your definition)?
Just a comment from the peanut-gallery: As a person who is currently using
web2, I want to weigh in heavily on the side of "restrict the applications
of twisted.web2 to object publishing". The way in which web2 publishes
objects fits very nicely with the way Roy Fielding describes REST, at
least insofar as my understanding of REST goes.
Every Resource *should* be identified by a URL, and that URL *should*
refer to one logical Resource. This is how the web works today; I for
one, hope that it continues to do so.
That said, I'm completely in favor of coming up with sane mechanisms for
Sessions and Auth. Changing web2 such that the a singly-rooted tree of
Resources is no longer the base metaphor should not be a requirement for
implementing Sessions and Auth.
It seems to me that you'd be much happier with a WSGI solution, wherein
you can just plug your request-processing, session-handling, foo-handling
components into the stream at appropriate places. Web2 supports WSGI
already, so that might be a better route to take. Then you can implement
the model that best suits your application, while leaving web2's object
publishing model intact for those of us that vastly prefer it.
L. Daniel Burr
More information about the Twisted-web