Jeff Watkins wrote:
Tim, the framework will be changed as follows:
Handling for forms will be pulled out of the Filter and moved into the
Provider. Similarly, cookie handling will also move to the provider.
In retrospect this seems like the way I should have done it in the
first place. But, you live and learn.
Therefore, you can write a provider that looks in the form for a PIN
and uses that to lookup the user. And someone else (Sean Cazzell, I
think) can write a provider that encodes the IP address, shoe size and
hair colour in the cookie for added security.
I'm going to try to make the base default provider useful to those who
want to extend it, but basically this will be the place to make your
change.
Thanks for the info Jeff and thanks in advance for the work involved in
making your changes!
