[lwip-devel] [patch #9576] Adding authorization cookie management

[Giuseppe Modugno]

Follow-up Comment #3, patch #9576 (project lwip):

> I'm using cookie to add the session ID in every subsequent HTTP requests, so
the server can check if it is valid or not.

Theorically, the authentication cookie should be added through "Set-Cookie"
header in HTTP response from the server. In order to keep httpd simple, I use
another solution. The session ID is returned in the body of a normal HTTP
response (of course, a "generated virtual" file). It's the client that
manually adds the cookie with the Javascript instruction:

document.cookie = "Auth=" + json.sid;


And the client could automatically goes to the home page with the correct
cookie with the follow instruction:

window.location.replace("index.html"); 



    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/patch/?9576>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/