hesco has asked for the wisdom of the Perl Monks concerning the following question:

I've been working to get a handle on CGI::Builder and / or CGI::Application as a framework for my future development projects. I've also been looking at DBIx::UserDB for handling Authentication, Authorization and Access control functions. Has anyone done any work to integrate these tools, either as a new extension to one of the above mentioned frameworks, or simply by using them together? I would appreciate some advise and direction on how best to proceed. I'm more interested in producing workable code than in re-inventing wheels.

Thansk,
-- Hugh

UPDATE

I had been frustrated by CGI::Builder when I found nothing more evolved than reliance on apache's htpasswd files.

Thanks to Steve Kirkup's post below, I went back again to look at the CGI::Application::Plugin::Authentication and CGI::Application::Plugin::Authorization modules. It showed how to deal with encrypted tokens.

I'm now imagining using CGI::App with these tools for authenticating and authorizing resources, and using it as a front end to DBIx::UserDB for managing the user and group and access control back end.

-- Hugh

Replies are listed 'Best First'.
Re: CGI::Builder & DBIx::UserDB together?
by tphyahoo (Vicar) on Feb 13, 2006 at 13:18 UTC
    I don't have an answer to your question, but... since you mentioned not wanting to reinvent wheels, there's a lot of work on authentication going on with the Catalyst project. eg:

    Catalyst Autentication
    Catalyst Authorization

    So if you are still scouting around for a framework and haven't invested too much in CGI application you could check out the catalyst bandwagon.

    I think CGI application may also have its own newsgroup, and maybe irc channel as well, so you might try there as well if you're committed to CGI::A.

    (Disclaimer: Cat is hard to set up, one reason I'm still merely sniffing the kool aid and haven't gone into full-on evangelist mode. Setup is being worked on, though, and gradually getting easier.)

      With regards to setup, user experiences have varied a bit --- it went pretty smoothly for me.

      --- Ben
      Yeah CGI::App has an IRC chanel on irc.perl.org server. There is also a mailing list and a support website located here.

      Some modules (plugins for CGI::App) were released recently that handle Authorization and Authentification ... check the website and CPAN.


      Have you tried freelancing? Check out Scriptlance - I work there.
Re: CGI::Builder & DBIx::UserDB together?
by Anonymous Monk on Feb 14, 2006 at 20:06 UTC

    CGI::Application already has plugins for Authorization, Authentication and DBH. They are very easy to setup and they can form a good base application module.

    It would be easier to do that instead of integrating several different modules that are not made work with each other to form your own custom application module.

    Steve Kirkup