Re: User profile in secure pages (https) -- WEB400

Subject: Re: User profile in secure pages (https)
From: David Gibbs <david@xxxxxxxxxxxx>
Date: Mon, 11 Aug 2008 12:05:15 -0500
List-archive: <http://archive.midrange.com/web400>
List-help: <mailto:web400-request@midrange.com?subject=help>
List-id: Web Enabling the AS400 / iSeries <web400.midrange.com>
List-post: <mailto:web400@midrange.com>
List-subscribe: <http://lists.midrange.com/mailman/listinfo/web400>, <mailto:web400-request@midrange.com?subject=subscribe>
List-unsubscribe: <http://lists.midrange.com/mailman/listinfo/web400>, <mailto:web400-request@midrange.com?subject=unsubscribe>

Bradley V. Stone wrote:

For example, if you've set it up to protect /cgi-bin, that means that for
anything outside of that path the REMOTE_USER environment variable will not
be available.

Even if they are already authenticated?

I guess this makes sense ... if, after the user is authenticated, the users identity is still required, some kind of authentication token should probably be stored in a cookie or session identifier.

david

As an Amazon Associate we earn from qualifying purchases.

Follow-Ups:

Re: User profile in secure pages (https) , Bradley V. Stone
Re: User profile in secure pages (https) , Haas, Matt (CL Tech Sv)

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.