/usr/share/pyshared/zope/authentication/interfaces.py is in python-zope.authentication 3.7.1-3fakesync1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 | ##############################################################################
#
# Copyright (c) 2009 Zope Corporation and Contributors.
# All Rights Reserved.
#
# This software is subject to the provisions of the Zope Public License,
# Version 2.1 (ZPL). A copy of the ZPL should accompany this distribution.
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY AND ALL EXPRESS OR IMPLIED
# WARRANTIES ARE DISCLAIMED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
# WARRANTIES OF TITLE, MERCHANTABILITY, AGAINST INFRINGEMENT, AND FITNESS
# FOR A PARTICULAR PURPOSE.
#
##############################################################################
"""Authentication interfaces
$Id: interfaces.py 97931 2009-03-11 22:31:33Z nadako $
"""
from zope.interface import Interface
from zope.security.interfaces import IPrincipal, IGroup
from zope.schema.interfaces import ISource
class PrincipalLookupError(LookupError):
"""No principal for given principal id"""
class IUnauthenticatedPrincipal(IPrincipal):
"""A principal that hasn't been authenticated.
Authenticated principals are preferable to UnauthenticatedPrincipals.
"""
class IFallbackUnauthenticatedPrincipal(IUnauthenticatedPrincipal):
"""Marker interface for the fallback unauthenticated principal.
This principal can be used by publications to set on a request if
no principal, not even an unauthenticated principal, was returned
by any authentication utility to fulfill the contract of IApplicationRequest.
"""
class IUnauthenticatedGroup(IGroup):
"""A group containing unauthenticated users"""
class IAuthenticatedGroup(IGroup):
"""A group containing authenticated users"""
class IEveryoneGroup(IGroup):
"""A group containing all users"""
class IAuthentication(Interface):
"""Provide support for establishing principals for requests.
This is implemented by performing protocol-specific actions, such as
issuing challenges or providing login interfaces.
`IAuthentication` objects are used to implement authentication
utilities. Because they implement utilities, they are expected to
collaborate with utilities in other contexts. Client code doesn't search a
context and call multiple utilities. Instead, client code will call the
most specific utility in a place and rely on the utility to delegate to
other utilities as necessary.
The interface doesn't include methods for data management. Utilities may
use external data and not allow management in Zope. Simularly, the data to
be managed may vary with different implementations of a utility.
"""
def authenticate(request):
"""Identify a principal for a request.
If a principal can be identified, then return the
principal. Otherwise, return None.
The request object is fairly opaque. We may decide
that it implements some generic request interface.
Implementation note
It is likely that the component will dispatch
to another component based on the actual
request interface. This will allow different
kinds of requests to be handled correctly.
For example, a component that authenticates
based on user names and passwords might request
an adapter for the request as in::
getpw = getAdapter(request, context=self)
The `context` keyword argument is used to control
where the ILoginPassword component is searched for.
This is necessary because requests are placeless.
"""
def unauthenticatedPrincipal():
"""Return the unauthenticated principal, if one is defined.
Return None if no unauthenticated principal is defined.
The unauthenticated principal must provide IUnauthenticatedPrincipal.
"""
def unauthorized(id, request):
"""Signal an authorization failure.
This method is called when an auhorization problem
occurs. It can perform a variety of actions, such
as issuing an HTTP authentication challenge or
displaying a login interface.
Note that the authentication utility nearest to the
requested resource is called. It is up to
authentication utility implementations to
collaborate with utilities higher in the object
hierarchy.
If no principal has been identified, id will be
None.
"""
def getPrincipal(id):
"""Get principal meta-data.
Returns an object of type IPrincipal for the given principal
id. A PrincipalLookupError is raised if the principal cannot be
found.
Note that the authentication utility nearest to the requested
resource is called. It is up to authentication utility
implementations to collaborate with utilities higher in the
object hierarchy.
"""
class ILoginPassword(Interface):
"""A password based login.
An `IAuthentication` utility may use this (adapting a request),
to discover the login/password passed from the user, or to
indicate that a login is required.
"""
def getLogin():
"""Return login name, or None if no login name found."""
def getPassword():
"""Return password, or None if no login name found.
If there's a login but no password, return empty string.
"""
def needLogin(realm):
"""Indicate that a login is needed.
The realm argument is the name of the principal registry.
"""
class IPrincipalSource(ISource):
"""A Source of Principal Ids"""
class ILogout(Interface):
"""Provides support for logging out."""
def logout(request):
"""Perform a logout."""
class ILogoutSupported(Interface):
"""A marker indicating that the security configuration supports logout.
Provide an adapter to this interface to signal that the security system
supports logout.
"""
|