oops, left one out.
they're all in lighthouse now.  I just wanted to list them here to
save others time in debugging things that as far as I can see are
bugs.

4 - If I request a URL that requires authentication and the user is
not, it properly redirects to login and on success redirects to the
originally requested URL.

What it does not do correct is show the proper URL for the login page
in the browser URL field.

for example, if I go to: http://localhost/account which requires
login, I do get the login form, but my browser's address field shows
http://localhost/account instead of https://localhost/login


thanks, Jon




On Dec 31, 2:35 am, Jon Hancock <[email protected]> wrote:
> I am mostly done testing my app recoded with merb 1.0.x, yeah!!
>
> Once I get this in production, I'll try to post a large subset of the
> code for public consumption.  In the meantime, I'll go ahead and list
> 3 outstanding issues I have with merb_auth.  All these may really be
> issues with the slice, but I'll let the experts decide ;).
> Of course, I will add each of these to lighthouse where I haven't
> already done so.
>
> 1 - see account.confirm_email_get(email_unconfirmed_code = 
> nil)http://gist.github.com/41692
> If the original request is:http://localhost/account/confirm_email/123456
>
> if I am not logged in, I get redirected to login, upon success, the
> email_unconfirmed_code which was passed to the original request is
> lost and the redirect after login 
> becomes:http://localhost/account/confirm_email
>
> 2 - https redirect should be a config option.  At the moment, redirect
> won't happen at all unless I hack the password slice.
>
> 3 - there are places other than login where I modify, usually replace,
> current user.  I am currently doing this in applicatin.set_user which
> is called in several controller actions.  Seehttp://gist.github.com/41695
> There does not seem to be an API for this very common behavior.  What
> I'm doing works for now.
>
> thanks, Jon
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"merb" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [email protected]
For more options, visit this group at http://groups.google.com/group/merb?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to