Re: [Webware-discuss] Request headers and basic HTTP auth

2004-03-17 Thread Chuck Esterbrook
(this is my second send, the first did not seem to take) On Tue, 16 Mar 2004 11:09:25 -0800, Chris Barker wrote: > Paul Boddie wrote: > > >> With Apache-based applications, it would seem that you have to >> get Apache to "protect" the authorised areas of your site, and >> from Webware (and other

Re: [Webware-discuss] Request headers and basic HTTP auth

2004-03-17 Thread deelan
Ian Bicking wrote: It's possible, it's just all weird and annoying. Here's a standard kind of recipe for Zope: RewriteCond %{HTTP:Authorization} ^(.*) RewriteRule ^/wherever/$1 /path/to/wkcgi/$1 [env=HTTP_CGI_AUTHORIZATION:%1,L,PT] thanks ian, i will study that rewrite rule and adapt to my own

Re: [Webware-discuss] Request headers and basic HTTP auth

2004-03-16 Thread Chuck Esterbrook
On Tue, 16 Mar 2004 11:09:25 -0800, Chris Barker wrote: > Paul Boddie wrote: > > >> With Apache-based applications, it would seem that you have to >> get Apache to "protect" the authorised areas of your site, and >> from Webware (and other components outside Apache) you apparently >> have no such f

Re: [Webware-discuss] Request headers and basic HTTP auth

2004-03-16 Thread Ian Bicking
Chris Barker wrote: OK, so what are people doing for WebWare sites that require Authentication/Authorisation? The most common solution is quite simple. When a page requires login, you give them a login form (you might check it in awake()). You get the username and password through plain form f

RE: [Webware-discuss] Request headers and basic HTTP auth

2004-03-16 Thread Geoffrey Talvola
Chris Barker wrote: > OK, so what are people doing for WebWare sites that require > Authentication/Authorisation? Look at the SecurePage example servlet. I always assumed most people were rolling their own solution by modifying that example servlet or at least using similar ideas. > Has Chuck E

Re: [Webware-discuss] Request headers and basic HTTP auth

2004-03-16 Thread Chris Barker
Paul Boddie wrote: With Apache-based applications, it would seem that you have to get Apache to "protect" the authorised areas of your site, and from Webware (and other components outside Apache) you apparently have no such fine-grained control over the authentication/authorisation process itself.

Re: [Webware-discuss] Request headers and basic HTTP auth

2004-03-16 Thread Ian Bicking
deelan wrote: i'm trying to implement basic HTTP auth using webware on apache (mod_webkit) + win2k and it seems there isn't a clean way to obtain request headers from webware. implementing basic auth is pretty straightforward but the lack of custom request headers makes me wonder if it is poss

RE: [Webware-discuss] Request headers and basic HTTP auth

2004-03-16 Thread Paul Boddie
deelan [mailto:[EMAIL PROTECTED] wrote: > > i'm trying to implement basic HTTP auth using webware on apache > (mod_webkit) + win2k and it seems there isn't a clean way to obtain > request headers from webware. implementing basic auth is pretty > straightforward but the lack of custom request h

[Webware-discuss] Request headers and basic HTTP auth

2004-03-16 Thread deelan
hi there, i'm trying to implement basic HTTP auth using webware on apache (mod_webkit) + win2k and it seems there isn't a clean way to obtain request headers from webware. implementing basic auth is pretty straightforward but the lack of custom request headers makes me wonder if it is possibl