deelan [mailto:[EMAIL PROTECTED] wrote:
> 
> i'm trying to implement basic HTTP auth using webware on apache 
> (mod_webkit) + win2k  and it seems there isn't a clean way to obtain 
> request headers from webware. implementing basic auth is pretty 
> straightforward but the lack of custom request headers makes me
> wonder if it is  possible at all.

Isn't Webware still substantially based on CGI environment variables, even
when it's mod_webkit that's sending the request data rather than WebKit.cgi?

> a recent ML disussion shed some light about the issue, but
> left me pretty confused: why there's no API to get arbitrary
> request header in webware? or, to be more precise, such API
> can be added or headers cannot be passed reliabily from apache
> to webware?

I think the CGI heritage of Webware combined with Apache's own restrictions
make such an API almost useless in practice.

> basically what it's needed to perform basic HTTP auth is
> to grab "Authorization" header value and do some trivial
> processing. it would be good to have such feature.

With Apache-based applications, it would seem that you have to get Apache to
"protect" the authorised areas of your site, and from Webware (and other
components outside Apache) you apparently have no such fine-grained control
over the authentication/authorisation process itself. I've looked into this
a bit recently for Webware and for other frameworks, and you might want to
look into the following package for clues:

http://www.python.org/pypi?:action=display&name=WebStack&version=0.2

Unifying Web frameworks, particularly when things like Apache stand in the
way, can be a pretty frustrating activity.

Paul


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click
_______________________________________________
Webware-discuss mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/webware-discuss

Reply via email to