[dancer-users] Basic authentication and Dancer

John McDermott, CPLP jjm at jkintl.com
Fri Feb 12 22:23:39 GMT 2016


I hope I'm not oversimplifying, but can't one set
session user => $username;
when it is validated and refer to it as
session('user')
later?

--john
>> On Feb 12, 2016, at 2:54 PM, Nikos Vaggalis <nikos.vaggalis at gmail.com> wrote:
>>> those variables get filled with the values you enter in the Authentication dialogue
>> I think he’s asking how you get those values from *Dancer* rather than from Plack.  Or at least, how you get at Plack stuff underneath Dancer, say, from a route handler.
> To clarify, the OP couched this issue in terms of HTTP Basic Authentication, but it’s broader than that.  The same question would apply if you used, say, Microsoft’s SSPI mechanism to allow single-sign-on to your web app:
>
>    http://stackoverflow.com/questions/1003751/
>
> Once the user is logged in, you still need the user name provided by the browser to tag database records for ownership by that user, to look up prior actions by that user, etc.
> _______________________________________________
> dancer-users mailing list
> dancer-users at dancer.pm
> http://lists.preshweb.co.uk/mailman/listinfo/dancer-users

-- 
John J. McDermott, CPLP
Learning and Performance Consultant
jjm at jkintl.com 575/737-8556
Check out my security blog posts
Add an A for the Arts To STEM and get STEAM and a strong engine to move forward.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.preshweb.co.uk/pipermail/dancer-users/attachments/20160212/4ed3ae3d/attachment.html>


More information about the dancer-users mailing list