HTML Login for ZMS5

[togis]

Hi everybody,

in older ZMS versions (python2) we used CookieCrumbler to setup HTML logins. Since this is no option anymore, what is the recommended integration for ZMS5? I looked into PluggableAuthService but couldn't figure out how to implement it into a ZMS Instance.

Thanks for your help,
Tobias

[drfho]

Hi @togis
authentication basically is done by Zope; the PluggableAuthService provides an interface for this purpose. In brief: the auth process is splitted into a bunch of tasks; one or more tasks are done by separate plugins. The plugins work in a chain and provide a standardized PAS-API for data processing. At the end of the chain, a valid credential (username/pass/roles) is given to Zope.

The PluggableAuthService-Object replaces the minimalistic default acl_user-container. A simple setup may look like this:

1. CookieAuthHelper-Plugin (for the tasks challenging/credentialExtraction) containing the login form
2. ZodbUserManager-Plugin for saving local user in ZODB
3. DelegatingMulti-Plugin for getting zope root node managers

Although default-PAS-Plugin work in many cases, for ZMS there is an optional set of basic plugins:
https://github.com/zms-publishing/Products.zmsPluggableAuthService

1. ZMSPASCookieAuthHelper
2. ZMSPASRolePlugin
3. ZMSPASSsoPlugin
4. ZMSPASUserPlugin

Each plugin contains a python script as "content" as a programming template to implement its functionality (e.g. getting roles from a database).

Actually the whole architecture is not easy to understand:
https://productspluggableauthservice.readthedocs.io/en/latest/
https://pypi.org/project/Products.PluggableAuthService/

Hope you got some inspirations,
fh

[cmeier76]

Ad 3. DelegatingMulti-Plugin for getting zope root node managers
=> see screenshot to get it work in tabs Activate and Properties