{"title":"Authenticating against Django’s user database from Apache","version":"3.1","locale":"pl","docname":"howto/deployment/wsgi/apache-auth","url":"/pl/3.1/howto/deployment/wsgi/apache-auth/","canonical":"https://djangodocs.dev/pl/3.1/howto/deployment/wsgi/apache-auth/","summary":"Since keeping multiple authentication databases in sync is a common problem when dealing with Apache, you can configure Apache to authenticate against Django’s…","html":"

Authenticating against Django’s user database from ApacheLink to this heading#

\n

Since keeping multiple authentication databases in sync is a common problem when\ndealing with Apache, you can configure Apache to authenticate against Django’s\nauthentication system directly. This requires Apache\nversion >= 2.2 and mod_wsgi >= 2.0. For example, you could:

\n\n\n
\n

Autentykacja z mod_wsgiLink to this heading#

\n\n

Make sure that mod_wsgi is installed and activated and that you have\nfollowed the steps to setup Apache with mod_wsgi.

\n

Next, edit your Apache configuration to add a location that you want\nonly authenticated users to be able to view:

\n
Apache
WSGIScriptAlias / /path/to/mysite.com/mysite/wsgi.py\nWSGIPythonPath /path/to/mysite.com\n\nWSGIProcessGroup %{GLOBAL}\nWSGIApplicationGroup %{GLOBAL}\n\n<Location "/secret">\n    AuthType Basic\n    AuthName "Top Secret"\n    Require valid-user\n    AuthBasicProvider wsgi\n    WSGIAuthUserScript /path/to/mysite.com/mysite/wsgi.py\n</Location>\n
\n

The WSGIAuthUserScript directive tells mod_wsgi to execute the\ncheck_password function in specified wsgi script, passing the user name and\npassword that it receives from the prompt. In this example, the\nWSGIAuthUserScript is the same as the WSGIScriptAlias that defines your\napplication that is created by django-admin startproject.

\n\n

Finally, edit your WSGI script mysite.wsgi to tie Apache’s authentication\nto your site’s authentication mechanisms by importing the check_password\nfunction:

\n
Code
import os\n\nos.environ['DJANGO_SETTINGS_MODULE'] = 'mysite.settings'\n\nfrom django.contrib.auth.handlers.modwsgi import check_password\n\nfrom django.core.handlers.wsgi import WSGIHandler\napplication = WSGIHandler()\n
\n

Requests beginning with /secret/ will now require a user to authenticate.

\n

The mod_wsgi access control mechanisms documentation provides additional\ndetails and information about alternative methods of authentication.

\n
\n

Authorization with mod_wsgi and Django groupsLink to this heading#

\n

mod_wsgi also provides functionality to restrict a particular location to\nmembers of a group.

\n

W tym przypadku konfiguracja Apache powinna wyglądać jak:

\n
Apache
WSGIScriptAlias / /path/to/mysite.com/mysite/wsgi.py\n\nWSGIProcessGroup %{GLOBAL}\nWSGIApplicationGroup %{GLOBAL}\n\n<Location "/secret">\n    AuthType Basic\n    AuthName "Top Secret"\n    AuthBasicProvider wsgi\n    WSGIAuthUserScript /path/to/mysite.com/mysite/wsgi.py\n    WSGIAuthGroupScript /path/to/mysite.com/mysite/wsgi.py\n    Require group secret-agents\n    Require valid-user\n</Location>\n
\n

To support the WSGIAuthGroupScript directive, the same WSGI script\nmysite.wsgi must also import the groups_for_user function which\nreturns a list groups the given user belongs to.

\n
Python
from django.contrib.auth.handlers.modwsgi import check_password, groups_for_user\n
\n

Requests for /secret/ will now also require user to be a member of the\n„secret-agents” group.

\n
\n
","rootId":"authenticating-against-django-s-user-database-from-apache","toc":[{"title":"Autentykacja z mod_wsgi","anchor":"authentication-with-mod-wsgi","children":[{"title":"Authorization with mod_wsgi and Django groups","anchor":"authorization-with-mod-wsgi-and-django-groups","children":[]}]}],"breadcrumbs":[{"docname":"howto/index","title":"Przewodniki „Jak to zrobić”","url":"/pl/3.1/howto/"},{"docname":"howto/deployment/index","title":"Wdrażanie Django","url":"/pl/3.1/howto/deployment/"},{"docname":"howto/deployment/wsgi/index","title":"Jak wdrażać z WSGI","url":"/pl/3.1/howto/deployment/wsgi/"}],"prev":{"docname":"howto/deployment/wsgi/modwsgi","title":"Jak używać Django z Apache i mod_wsgi","url":"/pl/3.1/howto/deployment/wsgi/modwsgi/"},"next":{"docname":"howto/deployment/asgi/index","title":"How to deploy with ASGI","url":"/pl/3.1/howto/deployment/asgi/"},"formats":{"html":"/pl/3.1/howto/deployment/wsgi/apache-auth/","markdown":"/pl/3.1/howto/deployment/wsgi/apache-auth.md","json":"/pl/3.1/howto/deployment/wsgi/apache-auth.json"},"source":"https://github.com/django/django/blob/stable/3.1.x/docs/howto/deployment/wsgi/apache-auth.txt","official":"https://docs.djangoproject.com/pl/3.1/howto/deployment/wsgi/apache-auth/","inVersions":["6.1","6.0","5.2","5.1","5.0","4.2","4.1","4.0","3.2","3.1","3.0","2.2","2.1","2.0","1.11","1.10"],"inLocales":["en","zh-hans","fr","ja","id","pt-br","ko","es","el","pl"]}