[hunchentoot-devel] Sessions for realm aware Realm
Andrea Chiumenti
kiuma72 at gmail.com
Sat Apr 12 22:50:33 UTC 2008
cookies must be bound to a specific address (I might even proxify two
applications on different address names (host1 and host2).
Obviously we have to keep [cookie<--(n..1)--->realm], so that a user
can eliminate cookies for specific applications (I use tons of tabs
with my FF browser).
In short I think that cookies must be bound to addresses(path) and
must not stay only in "/" for a greater flexibility.
And this extension should not change the default behaviour
kiuma
On Sat, Apr 12, 2008 at 6:28 PM, Hans Hübner <hans at huebner.org> wrote:
> Can we get away with extending START-SESSION by a realm argument that
> is added to or used instead of the *SESSION-COOKIE-NAME* to determine
> the cookie name or session id parameter?
>
> -Hans
>
>
> On 4/12/08, Andrea Chiumenti <kiuma72 at gmail.com> wrote:
>
>
> > Not completely correct.
> >
> > Suppose we want to "deploy" two applications in the same hunchentoot
> > server instance.
> > First, since they are two applications, they must have their own
> > cookie each one.
> >
> >
> > Now we have two options:
> > 1) let them to share the same session data, then bind the two
> > applications to the same realm,
> > 2) make the two applications completely independents, then bind them
> > to two different realms.
> >
> > So,
> > 1 request to only 1 session
> > and one session may be shared or not.
> >
> > kiuma
> >
> >
> >
> >
> >
> > On Sat, Apr 12, 2008 at 1:17 PM, Hans Hübner <hans at huebner.org> wrote:
> > > On 4/12/08, Hans Hübner <hans at huebner.org> wrote:
> > > > if I understand your source code right, what you need is a realm
> > > > argument to START-SESSION that makes it possible to have multiple
> > > > sessions on one Hunchentoot server. Correct?
> > >
> > > Well, I realised that my description of the feature is not quite
> > > right, another try: You want to have the option to use multiple
> > > sessions within one request, qualified by a realm argument. Or what?
> > > It would really help if you would describe your requirements yourself
> > > instead of letting us guess from your example source code.
> > >
> > > -Hans
> > >
> > >
> >
> > > _______________________________________________
> > > tbnl-devel site list
> > > tbnl-devel at common-lisp.net
> > > http://common-lisp.net/mailman/listinfo/tbnl-devel
> > >
> > _______________________________________________
> > tbnl-devel site list
> > tbnl-devel at common-lisp.net
> > http://common-lisp.net/mailman/listinfo/tbnl-devel
> >
> _______________________________________________
> tbnl-devel site list
> tbnl-devel at common-lisp.net
> http://common-lisp.net/mailman/listinfo/tbnl-devel
>
More information about the Tbnl-devel
mailing list