Links

• Permissions

Audit

• http://pypi.python.org/pypi/django-secure Utilities and a ‘linter’ to help you make your Django site more secure.

Users

Django Forgot Password

django-captchas ImageCaptcha and ReverseCaptcha solution.

OpenID

• django-openid OpenID tools for Django.

• how i (finally) got openid and django working together

django-registration A simple, portable, generic user-registration application for Django projects. Workflow follows a simple pattern:

• A user signs up for a new account, which will be inactive by default.

• An email is sent to the address they used to register, containing an activation link.

• Once they click the activation link, the account becomes active and they can log in as normal.

David Cramer: Logging In With Email Addresses in Django

http://opensource.washingtontimes.com/projects/django-clickpass/

Secret Key

To generate a secret key, see ../applications/extensions

SSL

• Red Robot Studios Part 3: Securing Django with SSL.

• ContributedMiddleware: SSLMiddleware.2.py

• Info about SSL redirect middleware.

• SSL Middleware for Webfaction (see the notes ref admin).