Anyway, as i remember storing username (not display name) in user cookies assumed to be a bad design, so isn't local storage same as the cookie? and the same ?
On Thu, Dec 8, 2016 at 3:04 PM, <falldi1...@gmail.com> wrote: > > Finally, i figured it out. instead of the old Cookie scheme, graylog is > using local storage of HTML 5 and keeping the sessionId and username that > could be set and get anywhere on javascript > > > On Wednesday, December 7, 2016 at 7:25:33 PM UTC+3:30, falld...@gmail.com > wrote: >> >> Thank you for your answer, >> So on new tab (not exactly after login) how the web UI requests would be >> authenticated? >> Just the first /system/sessions rest (the one with POST after login) >> contains non-null session_id, so after that how the authentication tokens >> would be generated? >> Is that possible to use Access Token with web ui client? >> >> On Wednesday, December 7, 2016 at 6:39:03 PM UTC+3:30, Jochen Schalanda >> wrote: >>> >>> Hi, >>> >>> On Wednesday, 7 December 2016 15:20:42 UTC+1, falld...@gmail.com wrote: >>>> >>>> here are some other modules which i'm using and they are working with >>>> the cookies, so just converting the cookie name back and forth is ok but >>>> graylog does not use cookie >>>> >>> >>> Correct, Graylog is using Basic Auth (as described in the documentation) >>> for authenticating against the Graylog REST API. It doesn't use or support >>> cookies. >>> >>> Cheers, >>> Jochen >>> >> -- > You received this message because you are subscribed to a topic in the > Google Groups "Graylog Users" group. > To unsubscribe from this topic, visit https://groups.google.com/d/ > topic/graylog2/XbzFGns7AGo/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > graylog2+unsubscr...@googlegroups.com. > To view this discussion on the web visit https://groups.google.com/d/ > msgid/graylog2/a87f5f58-d147-42d5-a168-ffe2ece52d71%40googlegroups.com > <https://groups.google.com/d/msgid/graylog2/a87f5f58-d147-42d5-a168-ffe2ece52d71%40googlegroups.com?utm_medium=email&utm_source=footer> > . > > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/CA%2B7s3m0wOeS_WaEvDpQ0a_kqMCj5WUgPQyhEvvZhdm-qveYmMA%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
