scoursen / django-apikey Goto Github PK

Not a topic I'm expert in, but this post demonstrates an alternative that might be safer:
http://jetfar.com/simple-api-key-generation-in-python/

Settings can change any time, but once you've run syncdb, you can't increase settings.API_KEY_SIZE without breaking generate_unique_api_key() because it'll try to make a key that's too big.

This should at least be documented, and it's probably safer to just pick a large-ish constant max length for the key field.

Need to support any arbitrary header for passing in the API key.

Should default to HTTP_AUTHORIZATION.

$ grep -nri djangotoolbox apikey/models.py
2:from djangotoolbox import fields