Re: [lwip-devel] [patch #9576] Adding authorization cookie management

[Simon Goldschmidt]

Would you mind keeping the discussion in one place?
I.e. please respond in the patch entry, not to the list.
This helps re-reading the discussion in the future.

Thanks,
Simon

> Giuseppe Modugno wrote:
> Il 28/02/2018 14:07, Mike Kleshov ha scritto:
> > Follow-up Comment #1, patch #9576 (project lwip):
> >
> > I'm not very familiar with various authentication schemes, but I think a
> > number of them can be implemented without having to modify httpd.
> Please, please, suggest one authentication scheme that can be used 
> without changing current httpd.
> 
> > That's one
> > reason not to apply this patch. The other one is the this: httpd is rather
> > simple, please keep it this way.
> Simple, but highly configurabile. My patch can be completely disabled by 
> macros, as usual in lwip. So if you don't want, don't enable it.
> 
> Simple, but complete. IMHO a web server that isn't able to manage 
> authentication and user types/sessions (with logout, expiration after 
> some time, and so on) is useless in many situations.
> 
> I hope there's a simpler solution to this, but I have seen many users 
> [1] in the past that ask how to add authentication in httpd without a 
> real solution.
> 
> [1] http://lists.nongnu.org/archive/html/lwip-users/2017-11/msg00087.html
> 
> _______________________________________________
> lwip-devel mailing list
> address@hidden
> https://lists.nongnu.org/mailman/listinfo/lwip-devel
>