This commit is contained in:
Andrew Svetlov 2015-10-29 15:34:38 +02:00
parent a0f73c85eb
commit 996361c233
1 changed files with 9 additions and 2 deletions

View File

@ -11,8 +11,10 @@ AUTZ_KEY = 'aiohttp_security_autz_policy'
def remember(request, response, identity, **kwargs): def remember(request, response, identity, **kwargs):
"""Remember identity into response. """Remember identity into response.
The action is performed by indentity_policy.remember() The action is performed by identity_policy.remember()
Usually the idenity is stored in user cookies homehow.
Usually the idenity is stored in user cookies homehow but may be
pushed into custom header also.
""" """
assert isinstance(identity, str), identity assert isinstance(identity, str), identity
identity_policy = request.app.get(IDENTITY_KEY) identity_policy = request.app.get(IDENTITY_KEY)
@ -28,6 +30,11 @@ def remember(request, response, identity, **kwargs):
@asyncio.coroutine @asyncio.coroutine
def forget(request, response): def forget(request, response):
"""Drop current identity.
Usually it clears cookie or server-side storage to forget user
session.
"""
identity_policy = request.app.get(IDENTITY_KEY) identity_policy = request.app.get(IDENTITY_KEY)
if identity_policy is None: if identity_policy is None:
text = ("Security subsystem is not initialized, " text = ("Security subsystem is not initialized, "