summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorBert JW Regeer <bertjw@regeer.org>2013-02-01 17:38:11 -0700
committerBert JW Regeer <bertjw@regeer.org>2013-02-02 00:42:44 -0700
commit918c9d9dd632d346909d2429647758352d753a42 (patch)
treec7d1c93d93f5070c77292902e02c3dad474ac0a3
parent2bee32671eac872489f19a08e326e407d400a525 (diff)
downloadpyramid-918c9d9dd632d346909d2429647758352d753a42.tar.gz
pyramid-918c9d9dd632d346909d2429647758352d753a42.tar.bz2
pyramid-918c9d9dd632d346909d2429647758352d753a42.zip
Update documentation for include_ip
Add a note that using the include_ip functionality with IPv6 is not a good idea due to the users network expiring IPv6 addresses quickly. See preferred lifetime/valid lifetime for routers doing SLAAC in IPv6 for more information.
-rw-r--r--pyramid/authentication.py4
1 files changed, 4 insertions, 0 deletions
diff --git a/pyramid/authentication.py b/pyramid/authentication.py
index 4f6ed2c1d..190298f98 100644
--- a/pyramid/authentication.py
+++ b/pyramid/authentication.py
@@ -450,6 +450,10 @@ class AuthTktAuthenticationPolicy(CallbackAuthenticationPolicy):
Default: ``False``. Make the requesting IP address part of
the authentication data in the cookie. Optional.
+ For IPv6 this option is not recommended. It ties the authentication
+ ticket to that individual's IPv6 address. Depending on the network they
+ are on, the IPv6 address that a user is using may expire quickly.
+
``timeout``
Default: ``None``. Maximum number of seconds which a newly