Sending data to django server from a non-django server

Question

Hi all,

I am making a bookmarklet where I need people to login first. My question is how do I send login credentials to the django server from a different domain?

I was thinking there were a couple ways, since I can't use send data via request.

1. Generate the sha1 algo on the client-side...but then how do I know what Django is salting with and how can I make that secure?

2. Find a way to send some post data to my server from a different domain.

Any other ideas/implementations?

Much appreciated

Answer 1

You can send the POST data (via SSL of course) to your Django site. Your view will handle the request. If you post to that view, you can authenticate using django.contrib.auth methods. The following was taken from http://docs.djangoproject.com/en/dev/topics/auth/

if request.method == 'POST':
    username = request.POST['username']
    password = request.POST['password']
    user = authenticate(username=username, password=password)
    if user is not None:
        if user.is_active:
            login(request, user)
            # Send success message.
        else:
            # Return a 'disabled account' error message
    else:
        # Return an 'invalid login' error message.