who.ini.in

[plugin:browserform]
# identification and challenge
use = penelope.core.security:make_plugin
# non rimuovere il doppio slash, sta per "url assoluta"
login_form_url = //login_form
login_handler_path = /do_login
logout_handler_path = /logout
post_login_url = /login_success
#post_logout_url = /logout_success
rememberer_name = auth_tkt

[plugin:auth_tkt]
# identification
use = repoze.who.plugins.auth_tkt:make_plugin
secret = s33kr1t
cookie_name = oatmeal
secure = False
include_ip = False

[plugin:sa_auth]
use = repoze.who.plugins.sa:make_sa_authenticator
user_class = penelope.core.models.dashboard:User
dbsession = penelope.core.models:DBSession
user_name_translation = login
validate_password_translation = check_password

[plugin:sa_md]
use = repoze.who.plugins.sa:make_sa_user_mdprovider
user_class = penelope.core.models.dashboard:User
dbsession = penelope.core.models:DBSession
user_name_translation = login

[plugin:basicauth]
use = repoze.who.plugins.basicauth:make_plugin
realm = PorAuth

[general]
request_classifier = repoze.who.classifiers:default_request_classifier
challenge_decider = penelope.core.security:challenge_decider

[identifiers]
plugins =
      browserform
      auth_tkt
      basicauth

[authenticators]
# plugin_name;classifier_name.. or just plugin_name (good for any)
plugins =
      sa_auth

[challengers]
# plugin_name;classifier_name:.. or just plugin_name (good for any)
plugins =
      browserform

[mdproviders]
plugins =
      sa_md