Difference: TWikiLoginManagerDotPm (2 vs. 3)

Revision 32011-04-12 - TWikiContributor

Line: 20 to 20
  Here's an overview of how it works:
Changed:
<
<
Early in TWiki::new, the login manager is created. The creation of the login manager does two things:
  1. If sessions are in use, it loads CGI::Session but doesn't initialise the session yet.
  2. Creates the login manager object
>
>
Early in TWiki::new, the login manager is created. The creation of the login manager does two things:
  1. If sessions are in use, it loads CGI::Session but doesn't initialise the session yet.
  2. Creates the login manager object
 Slightly later in TWiki::new, loginManager->loadSession is called.
Changed:
<
<
  1. Calls loginManager->getUser to get the username before the session is created
>
>
  1. Calls loginManager->getUser to get the username before the session is created
 
    • TWiki::LoginManager::ApacheLogin looks at REMOTE_USER (only for authenticated scripts)
    • TWiki::LoginManager::TemplateLogin just returns undef
Changed:
<
<
  1. reads the TWIKISID cookie to get the SID (or the TWIKISID parameters in the CGI query if cookies aren't available, or IP2SID mapping if that's enabled).
  2. Creates the CGI::Session object, and the session is thereby read.
  3. If the username still isn't known, reads it from the cookie. Thus TWiki::LoginManager::ApacheLogin overrides the cookie using REMOTE_USER, and TWiki::LoginManager::TemplateLogin always uses the session.
>
>
  1. reads the TWIKISID cookie to get the SID (or the TWIKISID parameters in the CGI query if cookies aren't available, or IP2SID mapping if that's enabled).
  2. Creates the CGI::Session object, and the session is thereby read.
  3. If the username still isn't known, reads it from the cookie. Thus TWiki::LoginManager::ApacheLogin overrides the cookie using REMOTE_USER, and TWiki::LoginManager::TemplateLogin always uses the session.
 
Changed:
<
<
Later again in TWiki::new, plugins are given a chance to override the username found from the loginManager.
>
>
Later again in TWiki::new, plugins are given a chance to override the username found from the loginManager.
 
Changed:
<
<
The last step in TWiki::new is to find the user, using whatever user mapping manager is in place.
>
>
The last step in TWiki::new is to find the user, using whatever user mapping manager is in place.
 

ObjectData =twiki

 
This site is powered by the TWiki collaboration platform Powered by PerlCopyright © 1999-2019 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding URCS? Send feedback
Note: Please contribute updates to this topic on TWiki.org at TWiki:TWiki.TWikiLoginManagerDotPm.