Falcon: Falconry auth package

[kgriffs]

Authentication is a commonly-requested feature, and so I think it would make sense to have an officially-supported auth package under the falconry org. Third parties can continue to create and maintain additional packages that provide additional features.

Must-haves:

• [ ] Basic auth
• [ ] Oauth2

Nice-to-haves:

• [ ] Role-based authorization (decorate resources or responders with required roles)

[kgritesh]

@kgriffs I would love to work on this. I recently wrote an authentication middleware called falcon-auth and would love to hear your thoughts on how can i either make it better or if need be rewrite it according to what you have in mind.

[kgritesh]

@kgriffs did you take a look at falcon-auth. Does it look like something that can be used? I am more than happy to add OAuth2 and role based authorization support.

[CaselIT]

sadly it seems that https://github.com/loanzen/falcon-auth is no longer really maintained.

A supported version in framework would be nice nice.

In the Nice-to-have I would also add beared authentication support

[vytas7]

As discussed with @CaselIT , I think one possible way is wrapping https://github.com/oauthlib/oauthlib.
Its architectural style is not exactly Falcon-like, but it looks great code quality and feature-wise IMHO, so we could potentially create a falcon-oauthlib add-on wrapping it.

[CaselIT]

I was looking a bit into it, and to support oauth2 and its extension, open id connect, it's not really sufficient to use a middleware, since multiple routes must be registered by the auth provider to support the different stages of the authentication.

That makes it quite different compared to other authentication types, like basic or bearer (like jwt) authentications, that do not require the definitions of routes and can be handled at the middleware level.

[CaselIT]

I've started on an implementation, but it's currently stalled since I've not had much time to work on it.
I'll update this issue if I find some time to make progress on it

[CaselIT]

I've managed to work a bit on the auth project. Still a lot of things missing. And very alpha stuff :)
https://github.com/CaselIT/falcon-auth2