Authentication

[Allan Carroll]

Hi,

I'm wondering what everyone has found to be the best practice for
authenticating Now clients. My first thought is to have the page
renderer insert a token into the Now client object and use it to auth
the user.

Thanks
-Allan

[Sridatta Thatipamala]

This is a fine way of doing it. However, if you are already using a cookie to store a session ID of some sort, you can read the "this.user.cookie" property on the server-side to access this information as a string. (You must parse the string yourself).

[Allan Carroll]

Since we already have a sessions setup, that seems like the most
robust way to go. So, I built a parser and session handler for it.

I'm only seeing this.user.cookie come through on websockets (well, at
least it's not coming through on xhr-polling). Should I expect it over
all transports?

On Jul 11, 12:32 pm, Sridatta Thatipamala <sthatipam...@gmail.com>
wrote: