How difficult would it be to shift away from using cookies towards a more
REST-based architecture?  Rely on authentication through the browser, or,
encode the authentication credentials in every URL--encrypted, of course.
 That would be one solution that would allow multiple users logged in via
the same browser. 
  
 An easier method would be to try to detect another login when one has already
occurred and reject the additional attempt. 
  
 Getting more REST-like would probably fit in nicely with the anonymous login
feature.  Any HTTP GET request received by webcit would require webcit to
ask citserver if the requested resource required authentication, but then
webcit wouldn't need to carry around much, if any, state information. 
   REST Binder 
 

Reply via email to