mORMot Open Source

radexpol

Member

From: Poland, Krk

Registered: 2019-11-29

Posts: 116

Basic authentication + cookies

Can someone help me implement standard http authentication?
1. End-user send the username+password through the request headers (Authorization: Basic xxxxxxxxxxxx)
2. Server creates the session token and send the create cookie request to the client
3. Every request from client must contain cookie session token

All communication will be secured by https.

ab

Administrator

From: France

Registered: 2010-06-21

Posts: 14,673

Website

Re: Basic authentication + cookies

Did you search the documentation?
https://synopse.info/files/html/Synopse … #TITLE_555

Anyway, I wouldn't recommend using Basic Authentication. In any scenario.
See https://synopse.info/files/html/Synopse … #TITLE_542

Either use the mORMot default authentication, or a JWT.
And always with HTTPS/TLS - or at least with our encrypted WebSockets.

radexpol

Member

From: Poland, Krk

Registered: 2019-11-29

Posts: 116

Re: Basic authentication + cookies

For now I can't change the authentication method in our current system, I would like to migrate from indy http server to mORMot, so that's why I'm asking about default http basic authorization based on token stored in cookies.