[Bug 867459] Re: REST API: Implement a simple way to check user credentials

[Barry Warsaw]

I'm actually going to close this as Fix Committed.  Here's what you can
do; if this is insufficient, please reopen this bug (although it may
indeed get postponed until after 3.0).

Let's say you're Postorius and someone has just typed their email
address and password.  You GET this resource:

http://localhost:9001/3.0/users/anne@example.com

Dig out the `password` attribute in the json.  Now, you are armed with
the encoded-hashed password of the user, and the cleartext password they
typed into the form.  You then use this Python code to do the
verification:

from flufl.password import verify
if verify(json_password, typed_password):
    # The user successfully logged in.

See
http://packages.python.org/flufl.password/docs/using.html#verifying-a-password
for details.

** Changed in: mailman
    Milestone: postponed => 3.0.0b2

** Changed in: mailman
       Status: Confirmed => Fix Committed

** Changed in: mailman
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Mailman
Coders, which is subscribed to GNU Mailman.
https://bugs.launchpad.net/bugs/867459

Title:
  REST API: Implement a simple way to check user credentials

To manage notifications about this bug go to:
https://bugs.launchpad.net/mailman/+bug/867459/+subscriptions