mORMot Open Source

Flashcqxg

Member

Registered: 2018-01-11

Posts: 31

Can THttpApiServer or THttpAsyncServer use sessions to store user info

Can THttpApiServer or THttpAsyncServer use sessions to store user information? For example, storing user accounts, user department IDs, user login IPs, login times, etc.
If possible, how can I use it?
thank you.

ab

Administrator

From: France

Registered: 2010-06-21

Posts: 14,660

Website

Re: Can THttpApiServer or THttpAsyncServer use sessions to store user info

You can use a JWT to authenticate and store session information, and check it at THttpServerGeneric (i.e. transport) level, within the Bearer.

But there is a full session mechanism, with proper storage, at TRestServer (i.e. REST) level.

Flashcqxg

Member

Registered: 2018-01-11

Posts: 31

Re: Can THttpApiServer or THttpAsyncServer use sessions to store user info

thanks.