Mailing List Archive: Zope: Users

CookieCrumbler, any new versions or replacement?

Index | Next | Previous | View Threaded

ramosh at gmail

Feb 2, 2012, 9:46 AM

Post #1 of 8 (647 views)
Permalink

CookieCrumbler, any new versions or replacement?

Yellow,

I need to reuse a web application I developed around 2005/2006. This
App was using CookieCrumbler as it's only authentication method but it
seems that after zope 2.11.x the product is broken as it has a few
imports from deprecated classes.

Anyone knows about CookieCrumbler versions above 1.2 or some other
replacement for this product?

TIA

--
Hugo Ramos - IT Project Manager
E: ramosh [at] gmail
W: www.hugoramos.eu

"Nobody expects the Spanish Inquisition!" - Monty Python's

Para visualizar este email em 3D, bata com uma bola de snooker na
testa e fixe o ecră durante 5 minutos a uma distância de 20cm.
_______________________________________________
Zope maillist - Zope [at] zope
https://mail.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
https://mail.zope.org/mailman/listinfo/zope-announce
https://mail.zope.org/mailman/listinfo/zope-dev )

shane at hathawaymix

Feb 2, 2012, 1:57 PM

Post #2 of 8 (625 views)
Permalink

Re: CookieCrumbler, any new versions or replacement? [In reply to]

On 02/02/2012 10:46 AM, Hugo Ramos wrote:
> I need to reuse a web application I developed around 2005/2006. This
> App was using CookieCrumbler as it's only authentication method but it
> seems that after zope 2.11.x the product is broken as it has a few
> imports from deprecated classes.
>
> Anyone knows about CookieCrumbler versions above 1.2 or some other
> replacement for this product?

Zope's pluggable authentication service replaces it.

Shane
_______________________________________________
Zope maillist - Zope [at] zope
https://mail.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
https://mail.zope.org/mailman/listinfo/zope-announce
https://mail.zope.org/mailman/listinfo/zope-dev )

richard at scholarpack

Feb 2, 2012, 2:57 PM

Post #3 of 8 (621 views)
Permalink

Re: CookieCrumbler, any new versions or replacement? [In reply to]

What is the main advantage of PAS over cookie crumbler over SSL out of interest?
Cheers
Rich

On 2 Feb 2012, at 21:57, Shane Hathaway <shane [at] hathawaymix> wrote:

> On 02/02/2012 10:46 AM, Hugo Ramos wrote:
>> I need to reuse a web application I developed around 2005/2006. This
>> App was using CookieCrumbler as it's only authentication method but it
>> seems that after zope 2.11.x the product is broken as it has a few
>> imports from deprecated classes.
>>
>> Anyone knows about CookieCrumbler versions above 1.2 or some other
>> replacement for this product?
>
> Zope's pluggable authentication service replaces it.
>
> Shane
> _______________________________________________
> Zope maillist - Zope [at] zope
> https://mail.zope.org/mailman/listinfo/zope
> ** No cross posts or HTML encoding! **
> (Related lists -
> https://mail.zope.org/mailman/listinfo/zope-announce
> https://mail.zope.org/mailman/listinfo/zope-dev )
_______________________________________________
Zope maillist - Zope [at] zope
https://mail.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
https://mail.zope.org/mailman/listinfo/zope-announce
https://mail.zope.org/mailman/listinfo/zope-dev )

chris at simplistix

Feb 3, 2012, 10:20 AM

Post #4 of 8 (620 views)
Permalink

Re: CookieCrumbler, any new versions or replacement? [In reply to]

On 02/02/2012 22:57, Richard Harley wrote:
> What is the main advantage of PAS over cookie crumbler over SSL out of interest?

It's even more complicated and maintained just as little ;-)

Chris

--
Simplistix - Content Management, Batch Processing & Python Consulting
- http://www.simplistix.co.uk
_______________________________________________
Zope maillist - Zope [at] zope
https://mail.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
https://mail.zope.org/mailman/listinfo/zope-announce
https://mail.zope.org/mailman/listinfo/zope-dev )

sascha.gottfried.registrierung at googlemail

Feb 3, 2012, 10:59 AM

Post #5 of 8 (623 views)
Permalink

Re: CookieCrumbler, any new versions or replacement? [In reply to]

Standalone CookieCrumbler is not generating http-only cookies. With PAS you can handle stuff like password strength and renewal strategies or account locking in a pluggable way. Read docs on pypi and
http://plone.org/documentation/kb/securing-plone

--- UrsprĂĽngl. Mitteilung ---
Von:Richard Harley
Gesend.: 02.02.2012, 23:57
An: Shane Hathaway
Cc: zope [at] zope
Betreff:Re: [Zope] CookieCrumbler, any new versions or replacement?

What is the main advantage of PAS over cookie crumbler over SSL out of interest?
Cheers
Rich

On 2 Feb 2012, at 21:57, Shane Hathaway <shane [at] hathawaymix> wrote:

> On 02/02/2012 10:46 AM, Hugo Ramos wrote:
>> I need to reuse a web application I developed around 2005/2006. This
>> App was using CookieCrumbler as it's only authentication method but it
>> seems that after zope 2.11.x the product is broken as it has a few
>> imports from deprecated classes.
>>
>> Anyone knows about CookieCrumbler versions above 1.2 or some other
>> replacement for this product?
>
> Zope's pluggable authentication service replaces it.
>
> Shane
> _______________________________________________
> Zope maillist - Zope [at] zope
> https://mail.zope.org/mailman/listinfo/zope
> ** No cross posts or HTML encoding! **
> (Related lists -
> https://mail.zope.org/mailman/listinfo/zope-announce
> https://mail.zope.org/mailman/listinfo/zope-dev )
_______________________________________________
Zope maillist - Zope [at] zope
https://mail.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
https://mail.zope.org/mailman/listinfo/zope-announce
https://mail.zope.org/mailman/listinfo/zope-dev )
_______________________________________________
Zope maillist - Zope [at] zope
https://mail.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
https://mail.zope.org/mailman/listinfo/zope-announce
https://mail.zope.org/mailman/listinfo/zope-dev )

tseaver at palladion

Feb 3, 2012, 11:02 AM

Post #6 of 8 (623 views)
Permalink

Re: CookieCrumbler, any new versions or replacement? [In reply to]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/02/2012 05:57 PM, Richard Harley wrote:
> What is the main advantage of PAS over cookie crumbler over SSL out of
> interest?

It is maintained.

Tres.
- --
===================================================================
Tres Seaver +1 540-429-0999 tseaver [at] palladion
Palladion Software "Excellence by Design" http://palladion.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk8sL0kACgkQ+gerLs4ltQ7oaACePzmMncK4CUqU8NBQZ+nSDI0V
xAkAoJMfEx1Ml8sWMZVBoydlZhyDNMo9
=tZLQ
-----END PGP SIGNATURE-----

_______________________________________________
Zope maillist - Zope [at] zope
https://mail.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
https://mail.zope.org/mailman/listinfo/zope-announce
https://mail.zope.org/mailman/listinfo/zope-dev )

tseaver at palladion

Feb 3, 2012, 11:20 AM

Post #7 of 8 (619 views)
Permalink

Re: CookieCrumbler, any new versions or replacement? [In reply to]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/03/2012 01:20 PM, Chris Withers wrote:
> On 02/02/2012 22:57, Richard Harley wrote:
>> What is the main advantage of PAS over cookie crumbler over SSL out
>> of interest?
>
> It's even more complicated and maintained just as little ;-)

I'll grant the complicated, as PAS is a framework which makes pretty much
evey part of the authentication process pluggable. However, the most
recent release of PAS was four days ago, which hardly makes for
"unmaintained."

Tres.
- --
===================================================================
Tres Seaver +1 540-429-0999 tseaver [at] palladion
Palladion Software "Excellence by Design" http://palladion.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk8sM2wACgkQ+gerLs4ltQ5rYgCg16faE9eZLEWe3pkketjFoIDw
xaYAn2GmDwCQGWkchVAsjMatdlWqdI0N
=82fX
-----END PGP SIGNATURE-----

_______________________________________________
Zope maillist - Zope [at] zope
https://mail.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
https://mail.zope.org/mailman/listinfo/zope-announce
https://mail.zope.org/mailman/listinfo/zope-dev )

chris at simplistix

Feb 10, 2012, 12:15 PM

Post #8 of 8 (614 views)
Permalink

Re: CookieCrumbler, any new versions or replacement? [In reply to]

On 03/02/2012 19:20, Tres Seaver wrote:
>>> What is the main advantage of PAS over cookie crumbler over SSL out
>>> of interest?
>>
>> It's even more complicated and maintained just as little ;-)
>
> I'll grant the complicated, as PAS is a framework which makes pretty much
> evey part of the authentication process pluggable. However, the most
> recent release of PAS was four days ago, which hardly makes for
> "unmaintained."

I'm still all about Products.SimpleUserFolder coupled with
CookieCrumbler, never had any bug reports ;-)

Chris

--
Simplistix - Content Management, Batch Processing & Python Consulting
- http://www.simplistix.co.uk
_______________________________________________
Zope maillist - Zope [at] zope
https://mail.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
https://mail.zope.org/mailman/listinfo/zope-announce
https://mail.zope.org/mailman/listinfo/zope-dev )

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads