The ExtractorInterface class, used to extract and validate information in web requests that may identify a user. Often, but not always, that information was originally created by a challenger.
Bases: object
An interface for user extraction.
Given a WSGI environ, figure out if the request contains information which can be used to identify a valid user. If it does, return a dict including information about that user.
If it doesn’t return False.
Look at the incoming request and try to extract a user.
A very simple extractor that looks at the HTTP Authorization header and looks for Basic auth information therein.
Bases: tiddlyweb.web.extractors.ExtractorInterface
An extractor for HTTP Basic Authentication. If there is an Authorization header attempt to get a username and password out of it and compare with User information in the Store. If the password is valid, return the user information. Otherwise return False.
Look in the request for an Authorization header.
An extractor that looks at a cookie named tiddlyweb_user.
Bases: tiddlyweb.web.extractors.ExtractorInterface
Look in the headers for a cookie named tiddlyweb_user.
If it is there and the associated hashed value validates against a server side secret, return the indicated user.
Extract the cookie, if there, from the headers and attempt to validate its contents.