Feature idea: scoped sesame tokens about django-sesame HOT 7 CLOSED

This is in the same vein as #56, which I deemed out of scope but could reconsider as there seems to be some demand.

It may be possible to do this in a backwards-compatible way when handling tokens manually (i.e. when not using the middleware).

from django-sesame.

Ah sorry about the dupe. It seems like I didn't search well enough.

It may be possible to do this in a backwards-compatible way when handling tokens manually (i.e. when not using the middleware).

Can just have the non-scope variant (what's there now) just work like it does now, and have scoped calls in addition (or extra parameters) that let you generate and verify. I don't think the scoped variants can/need to be handled automatically.

from django-sesame.

Yes.

from django-sesame.

@tasn The PR I just submitted adds an optional scope parameter to get_token and get_user. Only the code is there — no tests and docs yet. Would you be able to try it and let me know if that's what you want?

from django-sesame.

PR is now complete with tests and docs.

from django-sesame.

Version 2.1 is published with this feature. Enjoy!

from django-sesame.

Haven't managed to test it yet, but the API looks great, thanks a lot! I'll migrate to it in the next few weeks and will let you know if I encounter any issues. Thanks!

from django-sesame.