0.0.2

A new authorize_or_raise allows you to handle authentication failures yourself using Flasks error handling:

@app.route('/api/v1/apples/list')
def list_apples():
    authorize_or_raise('ListApples', 'apples')
    return jsonify([{'name': 'fred', 'weight': 50, 'color': 'red'}])

@self.app.errorhandler(AuthorizationFailed)
def handle_invalid_usage(error):
    return 'Authorization has failed'

This release adds a new TINYAUTH_VERIFY setting. This allows you to pass False to entirely disable SSL verification of your tinyauth backend or to pass the path to a CA bundle.

Additionally you can now also set TINYAUTH_BYPASS in your dev environment to completely bypass authentication and authorization.

0.0.1

Initial release!

This release covers 3 core requirements for integration of tinyauth with your Flask microservices:

• Access key protected API keys that 401 when a user has insufficient priveleges
• Protected pages that redirect to a login page when a user has insufficient privleges
• A default login page (AND api hook) for authenticating a user and getting a session access key as a cookie.