github-heroku-attack-rabbits

What's this business all about, then?

This repository helps you put access control into place to protect your secret pages by (deep breath):

hosting your secret page of static and/or dynamic content by using a free Heroku app running a Python Flask server that uses Flask-Dance to authenticate visitors with Github using OAuth which allows you fine-grained access control for your pages using user attributes like organization or team membership or even things like how many vowels a user has in their username.

Also, did I mention the attack rabbits?

Where is everything?

Final pages:

• The finished product (pages on Heroku protected by attack rabbits) is at github-heroku-attack-rabbits.herokuapp.com

• The documentation is at pages.charlesreid1.com/github-heroku-attack-rabbits

Two branches in this repo compose the github-heroku-attack-rabbits documentation:

• (YOU ARE HERE) The docs branch contains the files needed to generate the github-heroku-attack-rabbits documentation site.

• The gh-pages branch contains the static files generated from the documentation. The contents of this branch compose the github-heroku-attack-rabbits documentation site.

Two branches illustrate github-heroku-attack-rabbits in practice:

• The secret branch contains the files needed to create the secret page. (This is the "secret page source branch", so to speak.) This repository, the one you are looking at right now, is public, so of course these will not really be secret, but in practice the secret branch would live in a private repository.

• The heroku-pages branch contains the content that is actually pushed to Heroku - that is, the final Flask app. This includes the Flask app (Python program), in addition to files that tell Heroku how to run the app, plus gunicorn "middleware" scripts, plus the static content that Flask is supposed to serve up (whatever that happens to be - in our case, we will cover an mkdocs documentation site that is behind an authentication layer.).

Contents

An overview of the steps:

Get Started with Heroku

Get Started with Github

Initialize Repository: Branches

Create a Flask App using Flask-Dance

• Authenticate users based on Github membership only
• Authenticate users based on organization or team membership
• Authenticate users based on some other criteria
• Protection portions of the site

Test Flask App Locally

Deploying Flask App to Heroku

Custom Domains

Links

Python software used:

• Flask
• Flask-dance
• Flask-dance-github
• mkdocs-material (documentation theme)
• mkdocs (documentation)

Commercial services:

• Heroku
• Github

License

This is released under the WTFPL.