manosim / manosim/django-rest-framework-api-key
Is this unmaintained? I have an alternative, can I help?
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 94
- Forks
- 29
- PR merge metrics
- No merged PRs in 30d
Description
Hi @manosim and all 👋
Is this package unmaintained? The latest accepted PR was in September 2016 and there are a few pending PRs from up to March 2017. 🤔
I tried using this package for API key authorization but there were a few missing features and some security concerns (keys stored in plaintext?).
I ended up creating djangorestframework-api-key with these missing features. A beta is already released to PyPI.
This package already has some popularity (and is featured in the DRF docs), so :
- I'd be happy to bring the features back into this project.
- However, I am not sure how to handle those that are breaking (e.g. a more secure generation and validation scheme by using a {token, secret key} pair).
Glad to discuss!
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue names no files or tests and points to djangorestframework-api-key as an alternative implementation. Start by reviewing the package, its pending pull requests, and the alternative's documented features and security scheme. Done would require an agreed decision on whether to merge those features and how to handle breaking authentication changes.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- django, python
- Domain
- api, authentication, backend
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 15/100