Re: WebDAV browser integration

[Jerome Haltom <wasabi larvalstage net>]

Most authentication is not handled using Basic auth. Sorry. It's form
based in most applications I work with. Each user gets a session cookie.

Now, obviously, basic auth does exist in some apps. Just, it totally
leaves out an entire class of applications.

On Tue, 2007-05-08 at 22:32 +0200, Christian Kellner wrote:
> Hey,
> 
> > So, as you design a new VFS, please keep this in mind. It would be nice
> > to have a way to solve the technical problem of the browser passing the
> > cookies to the application. Or as another possibility, having the
> > browser and the application share the same connection using GVFS, and
> > thereby, the same cookies.
> 
> This is not really a problem of how gnome-vfs (or later GVFS) is
> designed. If we had something like a central cookie store we could
> already do implement that with gnome-vfs. Using the same *connection*
> would be possible if the browser would use the http method of gnome-vfs
> for its i/o and I think that is really, really bad idea for various
> reasons.
> I totally see the point about re-using cookies but on the other hand if
> you have the password saved in the session keyring Abiword (if using
> gnome-vfs) could just ask the keyring and all you need to do is click on
> the "Allow" button of the keyring. I am not sure its worth the effort to
> re-use cookies to avoid that one click. ;-)
> 
> Cheers,
> Christian
> 
> P.s.: gnome-vfs' http method doesn't care about cookies at all right
> now, we just re-send the AUTH header everytime which I guess breaks
> session handling for some (a lot?) web applications.
>