On Tue, Feb 03, 2009 at 05:45:34AM -0800, Istvan Albert wrote:
-> On Feb 2, 10:59?pm, "C. Titus Brown" <[email protected]> wrote:
-> > XML-RPC as a protocol doesn't support authentication AFAIK, and it's
-> > based on HTTP, which is stateless, so you can't simply authenticate the
-> > connection. ?I dealt with this in one of my projects by simply serving
-> > an auth cookie with any privileged function.
-> 
-> Do you mean needing a 'password' type argument for each XMLRPC
-> function, and only returning data if the password matches? That's how
-> I read this above.

Basically, yes.  I actually just co-opted the session mechanism of my
Web server and returned a session key tied to the connection upon
authentication; it saves keeping the password around for the duration of
each session.

cheers,
--titus
-- 
C. Titus Brown, [email protected]

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"pygr-dev" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/pygr-dev?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to