Nick Johnson

Trim down beaker and python-openid libraries

3

The beaker and python-openid libraries have many modules that are specific to backends not available on App Engine. Removing them would slim down AEoid's file count.

More complete documentation is needed, including information for users on how to include login forms directly rather than sending users to a login page.

Enhance login page

2

The login page needs a better interface, with something such as the jquery openid extension (http://jvance.com/pages/JQueryOpenIDPlugin.xhtml) or clickpass (http://www.clickpass.com/) to make life easier for users.

Extend the users API

1

We should add additional features such as requires_login decorators to the users module.

Handle XSRF issue in logout handler

1

Currently the user could be forced to log out with a request to the logout URL. We need to add XSRF protection against this.

Make beaker and python-openid into subpackages.

2

Modify the beaker and python-openid libraries to be subpackages, so they can be imported directly rather than requiring path manipulations, which may interfere with frameworks that include one or both...

Users should be able to customize the templates for the login pages.

Modify the library to support configuration of the openid module. Specifically, users should be able to choose what profile fields to request, as well as adding entirely different extensions to...

Change the environment key beaker uses for sessions in order to work well with frameworks that already use beaker.

Key only queries were added in SDK 1.2.2, and need to be added to BDBDatastore.