Hey there,

I'm currently trying to integrate an APE server into our web application. 
We want to use it for checking the online status of a user (instead of just 
doing ajax requests all the time), and if that works it will be used for 
more complicated stuff :) 

For developing, I have set up the APE server and it is running in 
background. In the Browser I can connect to it using the hello world 
example with loading the core and performing the start call. I wrote a 
simple test server side module that attaches to some events like adduser, 
mkchan and so on, and I use Ape.log to see that it really works. Cool Stuff 
so far.

But now comes the part where I need some advice:
When a user wants to connect to APE (which I see in the adduser event) I 
want to know whether this user is allowed to do so. The permission comes 
from our web server: If the user is logged in, he is allowed to connect to 
APE because otherwise we don't need any information from him. So in the 
adduser event I have to do something like a request to my webserver, wait 
for an answer, evaluate that answer and if it's ok then he will be added. 
How can I achieve this? 

Some additional questions:
- can I do something within adduser to don't let him connect to APE?
- is there any best practice to identify the user? And I mean a way that is 
not so easy to fake (e.g., the username might be easy to fake, I thought of 
the session id or sth similar).


I hope I can find someone helping me with this :) Thanks in advance!


-- 
You received this message because you are subscribed to the Google
Groups "APE Project" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/ape-project?hl=en
---
APE Project (Ajax Push Engine)
Official website : http://www.ape-project.org/
Git Hub : http://github.com/APE-Project/

Reply via email to