{"title":"Authenticating against Django’s user database from Apache","version":"3.2","locale":"it","docname":"howto/deployment/wsgi/apache-auth","url":"/it/3.2/howto/deployment/wsgi/apache-auth/","canonical":"https://djangodocs.dev/it/3.2/howto/deployment/wsgi/apache-auth/","summary":"Since keeping multiple authentication databases in sync is a common problem when dealing with Apache, you can configure Apache to authenticate against Django’s…","html":"

Authenticating against Django’s user database from ApacheLink to this heading#

\n

Since keeping multiple authentication databases in sync is a common problem when\ndealing with Apache, you can configure Apache to authenticate against Django’s\nauthentication system directly. This requires Apache\nversion >= 2.2 and mod_wsgi >= 2.0. For example, you could:

\n\n\n
\n

Autenticazione con mod_wsgiLink to this heading#

\n\n

Make sure that mod_wsgi is installed and activated and that you have\nfollowed the steps to setup Apache with mod_wsgi.

\n

Next, edit your Apache configuration to add a location that you want\nonly authenticated users to be able to view:

\n
Apache
WSGIScriptAlias / /path/to/mysite.com/mysite/wsgi.py\nWSGIPythonPath /path/to/mysite.com\n\nWSGIProcessGroup %{GLOBAL}\nWSGIApplicationGroup %{GLOBAL}\n\n<Location "/secret">\n    AuthType Basic\n    AuthName "Top Secret"\n    Require valid-user\n    AuthBasicProvider wsgi\n    WSGIAuthUserScript /path/to/mysite.com/mysite/wsgi.py\n</Location>\n
\n

The WSGIAuthUserScript directive tells mod_wsgi to execute the\ncheck_password function in specified wsgi script, passing the user name and\npassword that it receives from the prompt. In this example, the\nWSGIAuthUserScript is the same as the WSGIScriptAlias that defines your\napplication that is created by django-admin startproject.

\n\n

Finally, edit your WSGI script mysite.wsgi to tie Apache’s authentication\nto your site’s authentication mechanisms by importing the check_password\nfunction:

\n
Code
import os\n\nos.environ['DJANGO_SETTINGS_MODULE'] = 'mysite.settings'\n\nfrom django.contrib.auth.handlers.modwsgi import check_password\n\nfrom django.core.handlers.wsgi import WSGIHandler\napplication = WSGIHandler()\n
\n

Le richieste che iniziano con /secret/ richiederanno un utente per l’autenticazione

\n

The mod_wsgi access control mechanisms documentation provides additional\ndetails and information about alternative methods of authentication.

\n
\n

Autorizzazione con mod_wsgi e gruppi DjangoLink to this heading#

\n

mod_wsgi fornisce anche funzionalita di restringere una location particolare a un membro del gruppo.

\n

In questo caso, la configurazione di Apache dovrebbe essere cosi :

\n
Apache
WSGIScriptAlias / /path/to/mysite.com/mysite/wsgi.py\n\nWSGIProcessGroup %{GLOBAL}\nWSGIApplicationGroup %{GLOBAL}\n\n<Location "/secret">\n    AuthType Basic\n    AuthName "Top Secret"\n    AuthBasicProvider wsgi\n    WSGIAuthUserScript /path/to/mysite.com/mysite/wsgi.py\n    WSGIAuthGroupScript /path/to/mysite.com/mysite/wsgi.py\n    Require group secret-agents\n    Require valid-user\n</Location>\n
\n

To support the WSGIAuthGroupScript directive, the same WSGI script\nmysite.wsgi must also import the groups_for_user function which\nreturns a list groups the given user belongs to.

\n
Python
from django.contrib.auth.handlers.modwsgi import check_password, groups_for_user\n
\n

Requests for /secret/ will now also require user to be a member of the\n«secret-agents» group.

\n
\n
","rootId":"authenticating-against-django-s-user-database-from-apache","toc":[{"title":"Autenticazione con mod_wsgi","anchor":"authentication-with-mod-wsgi","children":[{"title":"Autorizzazione con mod_wsgi e gruppi Django","anchor":"authorization-with-mod-wsgi-and-django-groups","children":[]}]}],"breadcrumbs":[{"docname":"howto/index","title":"«How-to» guides","url":"/it/3.2/howto/"},{"docname":"howto/deployment/index","title":"Deploying Django","url":"/it/3.2/howto/deployment/"},{"docname":"howto/deployment/wsgi/index","title":"How to deploy with WSGI","url":"/it/3.2/howto/deployment/wsgi/"}],"prev":{"docname":"howto/deployment/wsgi/modwsgi","title":"How to use Django with Apache and mod_wsgi","url":"/it/3.2/howto/deployment/wsgi/modwsgi/"},"next":{"docname":"howto/deployment/asgi/index","title":"How to deploy with ASGI","url":"/it/3.2/howto/deployment/asgi/"},"formats":{"html":"/it/3.2/howto/deployment/wsgi/apache-auth/","markdown":"/it/3.2/howto/deployment/wsgi/apache-auth.md","json":"/it/3.2/howto/deployment/wsgi/apache-auth.json"},"source":"https://github.com/django/django/blob/stable/3.2.x/docs/howto/deployment/wsgi/apache-auth.txt","official":"https://docs.djangoproject.com/it/3.2/howto/deployment/wsgi/apache-auth/","inVersions":["6.1","6.0","5.2","5.1","5.0","4.2","4.1","4.0","3.2"],"inLocales":["en","zh-hans","fr","ja","id","it","pt-br","ko","es","el","pl"]}