Separate into 4 modules * init_instance: load the cubicweb repository from the `pyramid_cubicweb.instance` configuration key * defaults: provides cw-like defaults for the authentication and session management * core: make cubicweb use the authentication and session management of pyramid. It assumes the application provides the auth policies and session factory, and that the `cubicweb.*` registry entries are correctly initialised. This is this only required module or pyramid_cubicweb, the other ones are optional if the application provides its own versions of what they do. * bwcompat: provides a catchall route that delegate the request handling to an old-fashion cubicweb publisher (ie using url_resolver and controllers). Related to #4291173

     1

from pyramid.authentication import SessionAuthenticationPolicy

     2

from pyramid.authorization import ACLAuthorizationPolicy

     3

from pyramid.session import SignedCookieSessionFactory

     4

     5

from pyramid_cubicweb.core import get_principals

     6

     7

     8

def includeme(config):

     9

    config.set_session_factory(

    10

        SignedCookieSessionFactory(

    11

            secret=config.registry.settings['session.secret']

    12

        ))

    13

    14

    config.set_authentication_policy(

    15

        SessionAuthenticationPolicy(callback=get_principals))

    16

    config.set_authorization_policy(ACLAuthorizationPolicy())