Provide Django authentication backend for token authentication

[vikoivun]

Currently we only provide token based authentication backend for the DRF specific authentication mechanism.

Non surprisingly Graphene based backends cannot use this. They use the standard Django authentication mechanisms instead. Thus we need to provide support for them.

open-city-profile has implemented a wrapper that can be used as source of inspiration:
https://github.com/City-of-Helsinki/open-city-profile/blob/develop/open_city_profile/oidc.py

Also check if pysocial already has something for the token use case:
https://python-social-auth.readthedocs.io/en/latest/configuration/django.html

[akikoskinen]

This issue mentions two things:

1. Provide Django authentication middleware (I suppose the term "backend" in this issue's subject really means "middleware") for token authentication
2. Provide mechanism for token authentication in Graphene based systems

While both are probably useful, these aren't necessarily the same thing.

There is now this new authenticator system that has no opinions about any used frameworks (other than Django needs to be present). Could this satisfy the second point in the list above?

[vikoivun]

This issue mentions two things:

1. Provide Django authentication middleware (I suppose the term "backend" in this issue's subject really means "middleware") for token authentication
2. Provide mechanism for token authentication in Graphene based systems

While both are probably useful, these aren't necessarily the same thing.

There is now this new authenticator system that has no opinions about any used frameworks (other than Django needs to be present). Could this satisfy the second point in the list above?

Actually, I would've expected that the new authenticator satisfies both points. Do you think something more would be needed to support fe. open-city-profile ?

[akikoskinen]

The new authenticator is enough as is for open-city-profile. It won't be using the Django authentication framework because it's ill suited for the GraphQL case.

But a new Django authentication middleware should be quite easy to implement based on the new authenticator.