LTIOfficial/pootle-tzm

Authentication in pootle2-tzm

Closed this issue · 3 comments

I did an script that can connect to TZM central wiki, try with the submitted 
username/password then get TRUE or FALSE if they are ok. 
In case it's true, also return the 'email' of the user.

What it is need now is to connect this script code into the Pootle2(Django) 
default authentication with the following protocol:

- If user is not in pootle yet, he logins with his TZM user/password and if ok, 
pootle will send an activation mail and adds his user in the pootle database 
with the 'activate' flag as FALSE.
- If user is in pootle already, Pootle2 will not ask TZM anymore and just check 
if the user/password matches and let him in.

Desired: we should be able to show a different error message depending wether 
it failed authentication for the pootle account or for the TZM account.

Original issue reported on code.google.com by capiscuas@gmail.com on 19 Sep 2010 at 2:54

If not yet in Pootle and user/pass is good, start activation process - good

If not yet in Pootle and user/pass is bad - ???
- A custom error message here should say something like "Please log in with 
your exact TZM username & password"

If it fails when the user is recognized by Pootle, that would definitively 
indicate that only the password is incorrect.  Otherwise, they would not be 
'known' to Pootle.  So, it seems that the error message here should be for them 
to specifically check their password for accuracy.

Original comment by Gman...@gmail.com on 20 Sep 2010 at 6:22

Original comment by Gman...@gmail.com on 22 Sep 2010 at 8:10

  • Changed state: Accepted
Done and implemented!

I have left the pootle2 server online at:
http://pootle.thezeitgeistmovement.com:3003/accounts/login/

You can try to create a new TZM test account to try this functionality out.
Activation mail is being sent too! :-)

Original comment by capiscuas@gmail.com on 23 Sep 2010 at 1:44

  • Changed state: Fixed
  • Added labels: Authentication