Hi, I'm trying to integrate Atom publishing support in my blog
app which already uses authkit with the forward method very nicely.

I'm thinking about how to handle the authentication on the
AtomPP side, and in general what to do if the client doesn't
support cookies, and would like to hear other's thoughts
(especially James) regarding run-time configuration of authkit.

I've attached two patches [1], [2] to authkit. The first makes
it automatically test for cookie support. The second adds
support for a authkit.cookie.fallback = [basic | digest]
setting in the config file that will be used when the browser
does not have cookie support.

The result is that by specifying a cookie fallback to basic and
authkit.users.valid to a simple function to do the checking,
the rest of my app shouldn't need any modification for
authentication purposes.

If this seems like a good solution, please test the patches.

Thanks,

Footnotes:
[1]  
http://bosabosa.org/~dds/darcs/index.cgi?r=authkit;a=commitdiff;h=20070128091755-1caef-e8b6c2d707cf2c1ae8049ffdd8e4628b6aa8ad3c.gz

[2]  
http://bosabosa.org/~dds/darcs/index.cgi?r=authkit;a=commitdiff;h=20070128091942-1caef-dbae36aca4db738649885628d4d30f391057bb29.gz

--
  David D. Smith

Attachment: pgpPwO52IeK0Q.pgp
Description: PGP signature

Reply via email to