>
> Both URL signing (see
> <URL:
> http://web2py.com/books/default/chapter/29/12/components-and-plugins?search=signing#LOAD-and-Client-Server-component-communications>,
>  
> before the "Trapped ..." section)
> and JWT (see gluon/contrib/web2py_jwt.py) are available to address that 
> issue, but the normal use  of each expects the user to be logged in.
>

No need for a logged in user with digitally signed URLs (you can use any 
key to sign it). The URL() function does have a "user_signature" option, 
which digitally signs the URL using a key unique to the currently signed in 
user -- but that is a special case.

Anthony

-- 
Resources:
- http://web2py.com
- http://web2py.com/book (Documentation)
- http://github.com/web2py/web2py (Source code)
- https://code.google.com/p/web2py/issues/list (Report Issues)
--- 
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to