GitLab

This shared secret was used when cubicweb web server was living outside of the
data repository and forward requests with pyro.
We do not support pyro anymore so this is useless.

Just drop all related crypto code and drop the option
'trustedauth-secret-key-file' and drop the dependency on cryptodome/pycrypto.

Use a special kwargs "trustedauth_login", our BaseAuthentifier only match with
our WebAuthInfoRetriever.

As a side effect, this fix test/unittest_trustedauth.py which were broken in python 3 :)

pycrypto is no longer maintainer, see: https://github.com/dlitz/pycrypto/issues/238

- fix NameError: name 'unicode' is not defined
- fix SyntaxError: invalid syntax

- add basic tox.ini file
- update call to self.init_authentication()

- move cube files to new folder
- update MANIFEST.in, setup.py, __pkginfo__.py
- replace cube's old style import by new style import

to not import the __pkginfo__ module.

Also add missing dep on pycrypto.

Added tag cubicweb-trustedauth-version-0.3.1, cubicweb-trustedauth-debian-version-0.3.1-1 for changeset 44905ae8add5

Use dh_python2 instead of hand-rolling maintainer script

It used to refer to the secret key defined in all-in-one.conf as:
	[MAIN]
	secret-key="my secret key"
Unless I am mistaken, you should now point to an external file
that contains the secret key.
	[TRUSTEDAUTH]
	trustedauth-secret-key-file="/etc/application/secret-key"

Make it clearer when the x-remote-user header is missing.

This is required for unit tests of cubes that uses trustedauth

Use FakeRequest.set_request_header.