mORMot Open Source

Mane

Member

Registered: 2017-02-20

Posts: 15

Session not being registered after successful logon..

Hi,

Thanks to the support from the forum and AB in particular,  I finally managed to implement a successful RESTFul authentication handshake and the server gave me the ok.

Now, the second stage, attempting a Logout...

Apparently the server is unable to log out, because it has trouble retreiving the recently created session in order to close it.

The url used looks like this..
http://127.0.0.1:8080/root/auth?UserNam … n=088F34DF

The session parameter value is the returned SessionID from the previous successful logon. In the sample above the Hex version is used, but also tried with the regular int, with same result..

After some debugging at TSQLRestServerURIContext.Authenticate, I discover that the server couldn't retrieve the session. The line..

aSession := Server.fSessionAuthentication[i].RetrieveSession(self);

Returns aSession = nil,

And finally get a "Bad Request" message at the web browser client...

Any idea, of what am I possible missing?

Regards,
Mario

abnershr

Member

Registered: 2017-01-20

Posts: 4

Re: Session not being registered after successful logon..

Hi, I have same problem.  It works like a charm, login...

logondisplay: "Admin"
logongroup: 1
logonid: 1
logonname: "Admin"
result: "1613832716+1EE47FBE43C7A2A39221BAB184F9E43EDB4ACAE5BFAADFBEF6664A48DDD5722D"
server: "SESServidor"
version: "0.0.0.0"

and several requests, but when I try logout...

http://localhost/SES/auth?UserName=Admin&Session=1613832716

Failed to load resource: the server responded with a status of 400 (Bad Request)

@Mane, any solution?

Thanks

ImproSnake

Member

Registered: 2017-06-20

Posts: 30

Re: Session not being registered after successful logon..

Hello Guy's,

just in Case somone wants to know the Solution,

you both forgott the session_signature parameter at the url.

it have to look like this http://localhost/root/auth?Username=username&Session=SessionID&session_signature=session_signature

where the session_signature is computed from the uri (e.g. root/auth?Username=username&Session=SessionID)

hope this helps anyone who read this