ckanext-security
A CKAN extension to hold various security improvements for CKAN
Browse cluster: Cluster 182 →Tech stack & purpose
Ckanext-security is a CKAN extension that provides various security enhancements for CKAN data catalog systems. The extension implements stronger password reset tokens, brute force login protection with configurable attempt limits and lockout periods, server-side session storage via Redis, enforced two-factor authentication for all users, resource upload file type blacklisting, and prevents username changes after signup. Built with Python and designed for CKAN 2.9.x and later, it integrates with Redis for session and brute force token storage, uses the Beaker session middleware, and relies on the mimetypes and python-magic libraries for file type detection. The project is maintained by Data.govt.nz (data-govt-nz on GitHub).
Languages
Contributors
- Mark Stuart115 commits
- Niall McAndrew19 commits
- Rabia Sajjad19 commits
- Tobias Schulmann19 commits
- Ersin11 commits
- Ian Ward8 commits
- Eduard Nicodei8 commits · 8 followers
- Cam Findlay5 commits
- Jesse Vickery5 commits
- Edward Robinson5 commits
- ebuckley4 commits
- Lee Symes3 commits
- Ersin Buckley3 commits
- Tobi Schulmann3 commits
- Joe Guo2 commits
- ThrawnCA2 commits
- Dythya2 commits
- Ben Bright2 commits
- anotheredward2 commits
- Trym1 commits
- bzar1 commits
- William Hughes1 commits
