Article:		Atom Authentication
Subject:		Setting up the server auth.
Date:		2004-01-08 12:46:57
From:		simon kittle
Response to: Setting up the server auth.
Thanks for that, it's interesting. But it does mean the authentication happens at the CGI level, right? I think I was confused because you said "the server will return 401" and I guess I assumed the web server but presumably you were meaning the CGI based Atom server right? I just wanted to get this clear because obviously that would mean no other files in that specific directory are protected.

Previous Message

Up

Next Message

• Setting up the server auth.
  2007-04-10 11:21:36 Robert_Hayden [Reply]
  
  I don't think this tries to protect any files on the web server; I think this authentication only keeps the CGI script from doing things that someone other than Bob ask it to do.

  
  I believe the CGI script actually sends the 401 header.
  When the Atom client responds, the meat of its response is in the X-WSSE header which Apache passes to the CGI script.
  
  

  • Setting up the server auth.
    2007-05-24 13:27:13 sn3kehunt [Reply]
    
    sn3kehunt