On Thu, Sep 15, 2011 at 12:40 AM, Stephan Beal <[email protected]>wrote:
> i haven't yet done anonymous user support (that requires special handling > because of the random password). Nor have i yet thoroughly tested THIS > support (it's literally under 10 minutes old). "Seems to work." > BTW: this seems to mesh fine with the cookie. For example, if i log in: http://fjson/cgi-bin/fossil.cgi/json/login?... then check my capabilities: http://fjson/cgi-bin/fossil.cgi/json/cap (fjson is a local apache vhost, by the way) important here is that my client code is not actually recording/re-sending the auth token in the JSON bits - we're relying 100% on the cookie. i get (this is a mirror of g.perm): { "fossil": "29ec8d0199cab10325fa7d33af90261cd7cf603e", "timestamp": 1316072920, "payload": { "Setup": 1, "Admin": 1, "Delete": 1, "Password": 1, "Query": 0, "Write": 1, "Read": 1, "History": 1, "Clone": 1, "RdWiki": 1, "NewWiki": 1, "ApndWiki": 1, "WrWiki": 1, "RdTkt": 1, "NewTkt": 1, "ApndTkt": 1, "WrTkt": 1, "Attach": 1, "TktFmt": 1, "RdAddr": 1, "Zip": 1, "Private": 0 } } -- ----- stephan beal http://wanderinghorse.net/home/stephan/
_______________________________________________ fossil-users mailing list [email protected] http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users
