Re: [lwip-devel] [patch #9576] Adding authorization cookie management

[Giuseppe Modugno]

Il 27/02/2018 10:39, Giuseppe Modugno ha scritto:
> I tried to add authorization cookie management to httpd. [...]

I'm using cookie to add the session ID in every subsequent HTTP 
requests, so the server can check if it is valid or not.

Theorically, the authentication cookie should be added through 
"Set-Cookie" header in HTTP response from the server. In order to keep 
httpd simple, I use another solution. The session ID is returned in the 
body of a normal HTTP response (of course, a "generated virtual" file). 
It's the client that manually adds the cookie with the Javascript 
instruction:

      document.cookie = "Auth=" + json.sid;

And the client could automatically goes to the home page with the 
correct cookie with the follow instruction:

      window.location.replace("index.html");