Ponzu – An open-source HTTP server framework and CMS in Go

Re:Ponzu – An open-source HTTP server framework and CMS in Go by whizzkid on Sunday April 09, 2017 @03:10PM (#14073834)

Couldn't see any authentication system in Readme, Is there any auth mechanism that can be used for API usage?

[ Parent | on HN ]

Re:Ponzu – An open-source HTTP server framework and CMS in Go by nilslice on Sunday April 09, 2017 @09:03PM (#14075267)

Auth for API usage is up to the user to implement, but you could borrow code from the internal system/admin/user package to do password based auth & check JWTs. All of the API interactions w/ the system have hooks (see here: https://github.com/ponzu-cms/ponzu/blob/master/system/item/i...) so you can do auth verification, data validation, etc all within the req/res lifecycle.

[ Parent | on HN ]

Re:Ponzu – An open-source HTTP server framework and CMS in Go by daenney on Sunday April 09, 2017 @05:24PM (#14074445)

According to the README it depends on golang.org/x/crypto/bcrypt and github.com/nilslice/jwt so it seems likely to have authentication on board and a way of using JWT tokens for API access.

[ Parent | on HN ]

Re:Ponzu – An open-source HTTP server framework and CMS in Go by tshawkins on Sunday April 09, 2017 @09:42PM (#14075418)

How hard do you think it would be to add SAML/OAUTH2 authentication?

[ Parent | on HN ]