mORMot Open Source

tomek

Member

Registered: 2017-10-24

Posts: 46

Basic authentication vs session

Hi
I need to write a server for third party client, based on http basic authentication. So far it works only when /Auth is called first and subsequent calls include cookie: mORMot_session_signature=XXXXXXXX (retrieved from /Auth). Otherwise mORMot server returns 403 "Authentication Failed: Invalid signature (0)".
Is /Auth call necessary? Does it meet RFC standards?

Regards, Tomek

Last edited by tomek (2018-10-05 12:00:26)