On Feb 13, 2013, at 6:33 PM, Svilen <[email protected]> wrote:

> Unless the cookie life is 1 year. Its config anyway.

OK, if you control the server you could do that. (Though of course the client 
app’s HTTP framework could drop the cookie at any time; that’s within spec.) 

But I’m not sure what your point is. You can’t code a client app without 
considering credentials. The cookie has to come from somewhere, so the app has 
to be able to log in. What is it going to save you to store a cookie?

Anyway, no, TouchDB does not support logging in using _session, except as a 
side effect of using BrowserID. If you think it really needs to, the code is 
open source so you’re welcome to add that feature.

—Jens

Reply via email to