How to access Apache session information from python

Question

I am maintaining a web application built in python.

Access control for the app is handled at the Apache layer (using the Apache htpasswd file).

Right now, the app works the same no matter who is using it. The app doesn't even know who is logged in. But now I need to add a feature to the app that requires knowing who is logged in.

So the question is this: is there some way to access the Apache session information and see the user name of the user logged i non this session?

Of course I could completely redo the security model so that the app handles user login, but if there is any way to just access the Apache info, that will save me lots of work.

Thanks in advance!

What framework are you using?

Daniel Roseman
– Daniel Roseman

2013-12-09 18:01:20 +00:00
Commented Dec 9, 2013 at 18:01 — Daniel Roseman
– Daniel Roseman, Commented Dec 9, 2013 at 18:01

David Wolever · Accepted Answer · 2013-12-09 18:04:29Z

1

If you are using Basic Auth, you can check the Authorization HTTP header:

>>> request.headers["Authorization"]
'Basic YWRtaW46aHVudGVyMg=='
>>> request.headers["Authorization"].partition(" ")[2].decode("base64")
'admin:hunter2'

Alternatively, you can check the REMOTE_USER environment variable (although this isn't guaranteed to be set in the same way tha the Authorization header will be):

>>> import os
>>> os.environ['REMOTE_USER']
'admin'

answered Dec 9, 2013 at 18:04

David Wolever

156k94 gold badges365 silver badges513 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How to access Apache session information from python

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related