A framework for managing agent trust, such as public vs. private computers.
.. image:: https://img.shields.io/pypi/v/django-agent-trust?color=blue :target: https://pypi.org/project/django-agent-trust/ :alt: PyPI .. image:: https://img.shields.io/readthedocs/django-agent-trust-official :target: https://django-agent-trust-official.readthedocs.io/ :alt: Documentation .. image:: https://img.shields.io/badge/github-django--agent--trust-green :target: https://github.com/django-otp/django-agent-trust :alt: Source .. image:: https://img.shields.io/badge/code%20style-black-000000.svg :target: https://github.com/psf/black
This project has tools for managing trusted user agents. For example, you might allow the user to indicate whether they are using a public or private computer and implement different policies for each. Or you might be using a two-factor authentication scheme, allowing the users to bypass the second factor on machines that they designate as trusted. This uses Django's signed cookie facility and operates independently of sessions.
Short list of features:
- ``request.agent.is_trusted`` tells you whether the request came from a
trusted agent.
- APIs to trust or revoke the agent that made a given request.
- Global, per-user, and per-agent settings can set the duration of agent
trust as well as an inactivity timeout.
- Supports session-scoped agent trust for consistency of authorization
policies.
- Revoke all of a user's previously trusted agents at any time.
The mechanisms by which a user is allowed to designate trusted agents is left
entirely to clients of this library. For an application of this API using
one-time passwords, see django-otp-agents <https://pypi.org/project/django-otp-agents>, part of the django-otp <https://pypi.org/project/django-otp> suite.
.. end-of-doc-intro
This project is built and managed with hatch. If you don't have hatch, I
recommend installing it with pipx: pipx install hatch.
pyproject.toml defines several useful scripts for development and testing.
The default environment includes all dev and test dependencies for quickly
running tests. The test environment defines the test matrix for running the
full validation suite. Everything is executed in the context of the Django
project in test/test_project.
As a quick primer, hatch scripts can be run with hatch run [<env>:]<script>.
To run linters and tests in the default environment, just run
hatch run check. This should run tests with your default Python version and
the latest Django. Other scripts include:
To run the full test matrix, run hatch run test:run. You will need multiple
specific Python versions installed for this.
You can clean up the hatch environments with hatch env prune, for example to
force dependency updates.
.. _hatch: https://hatch.pypa.io/ .. _pipx: https://pypa.github.io/pipx/
FAQs
A framework for managing agent trust, such as public vs. private computers.
We found that django-agent-trust demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI confirms no security flaws were exploited in the Ultralytics supply chain attack and highlights improvements for safer package publishing.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.