Re: Re: Digest Authentication
| From: | Rasmus Lerdorf | Date: | Fri, 23 Aug 2002 12:38:54 +0000 |
| Subject: | Re: Re: Digest Authentication | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-113750@lists.php.net to get a copy of this message | ||
> The problem with this is that I am attempting to implement a RESTful
> webservice. I do not want to use PHP's session handling because it tries to
> do things that I do not want done (like sending cookies). In order to work
> within the REST principles, I also do not want alter my URLs by passing
> around a Session ID. As a result, my options are very limited, hence the
> HTTP Authentication scheme.
Hrm.. Why are cookies non-REST? There is very little difference between
HTTP authentication and a session cookie. One sends an Authorize heaader
the other sends a Set-Cookie header. Both are HTTP headers.
-Rasmus