內容簡介
這個外掛讓使用者訂閱需要驗證的饋送。在多站點安裝中使用 More Privacy Options 時,標記為私人的部落格的 RSS 饋送需要驗證。這個外掛在私人部落格上新增了一個使用者和站點特定的 40 字元金鑰,為每個在該部落格註冊的使用者創建了一個唯一的饋送 URL。這樣可以使用不支援驗證的饋送讀取器訂閱私人部落格的饋送。此外,這也允許在無法用本地 HTTP 驗證饋送的站點上訂閱,例如那些使用 CAS 或 OpenId 驗證使用者的站點。
這個外掛和 Feed Key 外掛在概念上相似,但是從頭開始設計,以在由 More Privacy Options 外掛控制訪問的多站點上運作。
主要區別如下:
只在私人站點的饋送 URL 上添加金鑰,而不是在網絡中的所有站點上。
金鑰是每個站點和每個使用者的,避免了一個網站的金鑰洩露會給使用者能看到的其他站點帶來風險。
存在饋送金鑰時,饋送請求會以匹配鑰匙的使用者身份進行驗證,而不是阻止沒有饋送金鑰的請求。
如果沒有金鑰,RSS 饋送請求會繼續進行,以便由其他驗證鉤子進行處理。
訪問控制仍由其他驗證外掛程序決定,這確保如果將使用者從私人部落格的訂閱中移除,將會拒絕對饋送的訪問。
使用者可以在每個部落格上撤銷自己的金鑰。
貢獻者和開發人員,請通過 Github 源庫提交問題和拉取請求。
根據 GNU 通用公共許可證 2.0 (GPL) 授權。
外掛標籤
開發者團隊
原文外掛簡介
This plugin allows users to subscribe to feeds requiring authentication. When using More Privacy Options in a multi-site installation RSS feeds for blogs marked as private require authentication. This plugin adds a user and site specific 40-character key on private blogs, creating a unique feed URL for each registered on user the blog. This allows feeds on private blogs to be subscribed to using feed readers that do not support authentication. As well, this allows subscription on sites where local HTTP authentication of feeds is not possible, such as those that use CAS or OpenId to authenticate users.
This plugin is similar in concept to the Feed Key plugin, but designed from the ground up to operate in a multi-site context where access is controlled by the More Privacy Options plugin.
Primary differences from Feed Key:
Only adds keys to the feed URLs on private sites, not all sites in the network.
Keys are per site and per user, preventing exposure of the key for a single site from giving access to other sites the user can see.
Presence of a feed key authenticates feed requests as the user that matches the key rather than blocking requests that don’t include a feed key.
If no key is present the RSS feed request continues without interference for handling by other authentication hooks.
Access control is still determined by other authentication plugins, ensuring that if a user is removed as a subscriber of a private blog, access to the feed will be denied.
Users can revoke their own keys on a per-blog basis.
Contributors and developers, please submit issues and pull-requests via the Github repository.
Licensed under the GNU General Public License 2.0 (GPL)
