Comment out django-basic-auth-ip-whitelist

bakerydemo/settings/production.py

@@ -225,26 +225,28 @@
 # Basic authentication settings
 # These are settings to configure the third-party library:
 # https://gitlab.com/tmkn/django-basic-auth-ip-whitelist
-if os.environ.get("BASIC_AUTH_ENABLED", "false").lower().strip() == "true":
-    # Insert basic auth as a first middleware to be checked first, before
-    # anything else.
-    MIDDLEWARE.insert(0, "baipw.middleware.BasicAuthIPWhitelistMiddleware")
-
-    # This is the credentials users will have to use to access the site.
-    BASIC_AUTH_LOGIN = os.environ.get("BASIC_AUTH_LOGIN", "wagtail")
-    BASIC_AUTH_PASSWORD = os.environ.get("BASIC_AUTH_PASSWORD", "wagtail")
-
-    # Wagtail requires Authorization header to be present for the previews
-    BASIC_AUTH_DISABLE_CONSUMING_AUTHORIZATION_HEADER = True
-
-    # This is the list of hosts that website can be accessed without basic auth
-    # check.
-    if "BASIC_AUTH_WHITELISTED_HTTP_HOSTS" in os.environ:
-        BASIC_AUTH_WHITELISTED_HTTP_HOSTS = os.environ[
-            "BASIC_AUTH_WHITELISTED_HTTP_HOSTS"
-        ].split(",")
-
-    BASIC_AUTH_RESPONSE_TEMPLATE = "base/basic_auth.html"
+# Commented out until django-basic-auth-ip-whitelist supports Django 5.0.
+# See https://github.com/tm-kn/django-basic-auth-ip-whitelist/pull/15.
+# if os.environ.get("BASIC_AUTH_ENABLED", "false").lower().strip() == "true":
+#     # Insert basic auth as a first middleware to be checked first, before
+#     # anything else.
+#     MIDDLEWARE.insert(0, "baipw.middleware.BasicAuthIPWhitelistMiddleware")
+
+#     # This is the credentials users will have to use to access the site.
+#     BASIC_AUTH_LOGIN = os.environ.get("BASIC_AUTH_LOGIN", "wagtail")
+#     BASIC_AUTH_PASSWORD = os.environ.get("BASIC_AUTH_PASSWORD", "wagtail")
+
+#     # Wagtail requires Authorization header to be present for the previews
+#     BASIC_AUTH_DISABLE_CONSUMING_AUTHORIZATION_HEADER = True
+
+#     # This is the list of hosts that website can be accessed without basic auth
+#     # check.
+#     if "BASIC_AUTH_WHITELISTED_HTTP_HOSTS" in os.environ:
+#         BASIC_AUTH_WHITELISTED_HTTP_HOSTS = os.environ[
+#             "BASIC_AUTH_WHITELISTED_HTTP_HOSTS"
+#         ].split(",")
+
+#     BASIC_AUTH_RESPONSE_TEMPLATE = "base/basic_auth.html"
 
 
 # Force HTTPS redirect (enabled by default!)

requirements/production.txt

@@ -11,4 +11,6 @@ django-storages==1.14.2
 botocore>=1.12.33,<1.13
 aws-requests-auth==0.4.3
 django-redis==5.4.0
-django-basic-auth-ip-whitelist==0.5
+# Commented out until django-basic-auth-ip-whitelist supports Django 5.0.
+# See https://github.com/tm-kn/django-basic-auth-ip-whitelist/pull/15.
+# django-basic-auth-ip-whitelist==0.5