And what does AIS stand for? Or did I miss that. Lincoln
On Fri, 2004-05-14 at 19:50, David Nicol wrote: > [EMAIL PROTECTED] wrote: > > > > I hadn't heard of AIS before. Sounds like it would make a nice additional > > authentication method. Part of my TODO is to abstract both the > > authentication and storage methods. I should be able to add this auth > > method after that (though, it doesn't offer any group based permissions, > > so that would still need handled locally). > > AIS provides an authenticated e-mail address, in one line near the > start of a CGI program. > > I have built several access control lists based on it, setting up > group based permissions implies dividing everyone into groups -- > something that makes no sense until you know who you have. > > > > I looked over AIS::client... there are a lot of exit statements in there, > > and a lot of hardcoded HTML. It'd be nice if allowed the user of the > > module to handle those parts, and just supplied the information it would > > need (the full URL of the AIS server when needed, etc), just a thought. > > And if it returned some failure condition, it wouldn't have to exit(), and > > could allow the client to handle those errors. > > the exits are because the AIS client has to run several times during > the initial handshake. It redirects, then exits, both to establish a > session cookie and to redirect to the AIS server. When the session > is established, it just looks up the identity and returns. The only > thing the user sees from the AIS client module is the redirection pages. > > The AIS server provides the log-in interface. > > > It might be a while before I get the authentication and storage methods > > abstracted (shouldn't be all that difficult, but it's not on the top of my > > TODO list right now). When I do, I'll definately look into AIS, and see if > > I can find similar resources out there. > > Wonderful. > > The dot-gnu authentication committee has abstracted authentication > methods into a common interface, so if you want to pick up some > pre-built wheels instead of reinventing all of them yourself there > might be something useful in http://sourceforge.net/projects/macs
