On Jun 13, 2014, at 5:26 PM, CouchbaseLover <[email protected]> wrote:
> 1. We post a user to the server. /$DB/_user/ Um wait -- you do this from the app? That's part of the Sync Gateway admin API ... if you're making the admin API publicly accessible, you're giving anyone in the world the ability to do anything to your database (what CouchDB calls an "admin party".) You definitely don't want to do that in real life. > Seems like the only thing your doing is - NSURLCredentials *cred without the > need of NSURLProtectionSpace > and then just put CBLReplcation.credentials = cred. Right. All you need to do is tell the replication object the username/password to use. > Where is your session? There isn't one; it's just using HTTP Basic auth, i.e. passing the username/password with each request. --Jens -- You received this message because you are subscribed to the Google Groups "Couchbase Mobile" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/mobile-couchbase/CB535E15-150E-4420-A97F-316BF538CF22%40couchbase.com. For more options, visit https://groups.google.com/d/optout.
