I am exploring a few different options for adding authentication support to Gofer::Transport::http and I would appreciate any feedback.

The most straightforward option is to add several attributes (netloc, realm, http_user, and http_password) that would be passed to the $useragent->credentials. These could be specified in the DSN or in %attrs (using the go prefix). This is the style that we are currently using in our dev code.

I think that most people don't usually think about the netloc and realm when using http auth, from the client side. It would be possible to avoid setting these by subclassing LWP::UserAgent and the get_basic_credentials method.

Another option would be to specify the username and password in the URL, (http://userid:passw...@example.com/). The big advantage here is that the DBI distribution would not need to be touched. However, some people may have concerns about potential security issues with this method.

Thanks,
Stuart Johnston

Reply via email to