django-formapi 0.1.0

Django API creation with signed requests utilizing forms for validation.

Create JSON API:s with HMAC authentication and Django form-validation.

Installation

Install django-formapi in your python environment

$ pip install django-formapi

Add formapi to your INSTALLED_APPS setting.

INSTALLED_APPS = (
    ...
    'formapi',
)

Add formapi.urls to your urls.py.

urlpatterns = patterns('',
    ...
    url(r'^api/', include('formapi.urls')),
)

Usage

Go ahead and create a calls.py.

class DivisionCall(calls.APICall):
    """
    Returns the quotient of two integers
    """
    dividend = forms.FloatField()
    divisor = forms.FloatField()

    def action(self, test):
        dividend = self.cleaned_data.get('dividend')
        divisor = self.cleaned_data.get('divisor')
        return dividend / divisor

API.register(DivisionCall, 'math', 'divide', version='v1.0.0')

Just create a class like your regular Django Forms but inheriting from APICall. Define the fields that your API-call should receive. The action method is called when your fields have been validated and what is returned will be JSON-encoded as a response to the API-caller. The API.register call takes your APICall-class as first argument, the second argument is the namespace the API-call should reside in, the third argument is the name of your call and the fourth the version. This will result in an url in the form of api/[version]/[namespace]/[call_name]/ so we would get /api/v1.0.0/math/divide/.

A valid call with the parameters {'dividend': 5, 'divisor': 2} would result in this response:

{"errors": {}, "data": 5, "success": true}

An invalid call with the parameters {'dividend': "five", 'divisor': 2} would result in this response:

{"errors": {"dividend": ["Enter a number."]}, "data": false, "success": false}

Authentication

By default APICalls have HMAC-authentication turned on. Disable it by setting signed_requests = False on your APICall.

If not disabled users of the API will have to sign their calls. To do this they need a secret generate, create a APIKey through the django admin interface. On save a personal secret and key will be generated for the API-user.

To build a call signature for the DivisonCall create a querystring of the calls parameters sorted by the keys dividend=5&divisor=2. Create a HMAC using SHA1 hash function. Example in python:

import hmac
from hashlib import sha1
hmac_sign = hmac.new(secret, urllib2.quote('dividend=5&divisor=2'), sha1).hexdigest()

A signed request against DivisionCall would have the parameters {'dividend': 5, 'divisor': 2, 'key': generated_key, 'sign': hmac_sign}

Documentation

Visit /api/discover for a brief documentation of the registered API-calls.

MIT

Author

Hannes Ljungberg

Pip

django-formapi==0.1.0

Classifiers

  • Topic :: Utilities
  • Topic :: Software Development :: Libraries :: Python Modules
  • Programming Language :: Python :: 2.7
  • Programming Language :: Python :: 2.6
  • Programming Language :: Python :: 2
  • Programming Language :: Python
  • Operating System :: OS Independent
  • Natural Language :: English
  • License :: OSI Approved :: MIT License
  • Intended Audience :: Developers
  • Framework :: Django
  • Environment :: Web Environment
File Type Python Version Uploaded On Downloads
django-formapi-0.1.0.tar.gz Source Jan. 31, 2014 943
Version Release Date
0.1.0 Jan. 31, 2014
0.0.7 June 25, 2013
0.0.6 June 25, 2013
0.0.5 April 21, 2013
0.0.4 March 1, 2013
0.0.3 Feb. 25, 2013
0.0.2 Feb. 22, 2013
0.0.1 Feb. 22, 2013
Date Package Version Action
Nov. 4, 2014, 1:13 p.m. django-formapi 0.1.0 Release Created
Nov. 4, 2014, 1:13 p.m. django-formapi 0.0.2 Release Created
Nov. 4, 2014, 1:13 p.m. django-formapi 0.0.3 Release Created
Nov. 4, 2014, 1:13 p.m. django-formapi 0.0.1 Release Created
Nov. 4, 2014, 1:13 p.m. django-formapi 0.0.6 Release Created
Nov. 4, 2014, 1:13 p.m. django-formapi 0.0.7 Release Created
Nov. 4, 2014, 1:13 p.m. django-formapi 0.0.4 Release Created
Nov. 4, 2014, 1:13 p.m. django-formapi 0.0.5 Release Created
Nov. 4, 2014, 1:13 p.m. django-formapi Package Created