org.auth

Module Contents

Classes

MTANAuth

Defines a model for mTAN authentication views.
class org.auth.MTANAuth(app: onegov.org.app.OrgApp, to: str = '/')[source]

Defines a model for mTAN authentication views.

This is similar in functionality to onegov.user.auth.core.Auth but it is not tied to a specific user, instead we just remember whether or not we’re still authenticated using the browser session.

Even with multiple active sessions, logically we treat all sessions for the same phone number as one session, i.e. access limits apply to all browser sessions that are tied to that specific number.

send_mtan(request: onegov.org.request.OrgRequest, number: str) → webob.Response[source]
authenticate(request: onegov.org.request.OrgRequest, tan: str) → str | None[source]