The Underscore Archives

On 7/13/07, Rick Hurst <rick.hurst at gmail.com> wrote:
> On 7/13/07, Jon Bennett <jmbennett at gmail.com> wrote:
> > > so far the only way I can think to do this is to have an intermediary
> > > page that does a client side post with javascript, or encrypt the
> > > username/password and add it onto a query string and do a redirect but
> > > would rather avoid that for security/ robustness reasons.
> >
> > what about handling the login [in the Dispatcher] over cURL to send a
> > POST request to the correct server and redirecting to the correct
> > place after a successful login?
>
> I can actually authenticate a user from the centralised user table,
> but the challenge is then setting a cookie to the users browser with
> the correct domain info in it so that can be recognised as logged in
> after the redirect.

if you send the auth info via cURL as well, it will automatically
create a cookie for you.

j

-- 


jon bennett
t: +44 (0) 1225 341 039 w: http://www.jben.net/
iChat (AIM): jbendotnet Skype: jon-bennett