[Esapi-python] Middleware and integration with frameworks
craig.younkins at owasp.org
Wed Jul 22 15:34:07 EDT 2009
When designing ESAPI on Python, I aim to be framework agnostic.
Unfortunately, independence from the framework is difficult to achieve,
particularly in a language like Python where things like HttpRequest objects
are not as standardized as they are in Java. You can compare the request and
response object interfaces for Django
Another issue I'm looking at while handling the User and Authenticator parts
of ESAPI is middleware integration. While there is PEP
the WSGI standard, it seems that
a different approach while
Pylons <http://pylonshq.com/docs/en/0.9.7/concepts/#id1> embraces the spec.
Middleware seems to be an ideal place to do authentication and permissions
management, and the Django default authentication
absolutely beautiful and elegant in use. Most of me wants to duplicate
the elegance of the Django auth middleware, but keep it available to Pylons
as well. Is this even possible?
Does anyone have ideas for how to help maintain framework agnosticism? Also,
what framework have *you* used in your Python web application adventures?
Thanks for any ideas!
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Esapi-python