Hello all,

Has anyone ever tried to implement _optional_ HTTP authentication?

Typical use case:
- Users provide username and password via form at /users/login.
- Username/password is POSTed to /users/login and user is
authenticated by AuthComponent
- User is then logged in an can access secured pages

Desired use case
- Users can still login as above
- A service (i.e. response time monitoring software) wishes to access
a secured page.
- Service provides username/password via HTTP basic or digest
authentication at the time secured page is requested
- User is logged in via AuthComponent automagic and appears to
application logic accessing AuthComponent to be no different that if
user had logged in via typical use case.
- Request for secured page succeeds

The key here is that a user can login via post to /users/login OR at
page request time via HTTP authentication.

Any code or comments will be greatly appreciated.

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to