mozilla/django-browserid — comment on commit 20583f12148324a32638f4af2a71798d640b6be6
File: django_browserid/auth.py line 24
By ozten:

If we make this accept a request as a parameter, then we can fill in missing details (and maybe log warnings).

Of course this is less secure as mentioned by @fmarier, ryan, and mhanson.

I think this is fine, working code with no config and secure code with config. This will be documented well in the README.