Does TortoiseSVN supports cookies?

104 views
Skip to first unread message

Claudia....@ricoh-europe.com

unread,
Dec 3, 2010, 3:03:09 AM12/3/10
to us...@tortoisesvn.tigris.org

Hello,


Our Company uses Atlassian Crowd for Single Sign-On. We already have Apache * Subversion integrated with Crowd. Now we would like to integrate TortoiseSVN too. Crowd uses Cookies as SSO tokens. My question is:  Does TortoisesSVN supports  Cookies? Or it will ignore them? Can I configure it?


Regards,

Santos

Stefan Küng

unread,
Dec 3, 2010, 9:39:31 AM12/3/10
to us...@tortoisesvn.tigris.org

Cookies are for web browsers. TSVN and Subversion are not browsers and
therefore don't support cookies.

Stefan

--
___
oo // \\ "De Chelonian Mobile"
(_,\/ \_/ \ TortoiseSVN
\ \_/_\_/> The coolest Interface to (Sub)Version Control
/_/ \_\ http://tortoisesvn.net

------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2687576

To unsubscribe from this discussion, e-mail: [users-un...@tortoisesvn.tigris.org].

Feldhacker, Chris

unread,
Dec 3, 2010, 9:51:03 AM12/3/10
to us...@tortoisesvn.tigris.org
-----Original Message-----
From: Stefan Küng [mailto:torto...@gmail.com]
Sent: Friday, December 03, 2010 8:40 AM
To: us...@tortoisesvn.tigris.org
Subject: Re: Does TortoiseSVN supports cookies?

>On 03.12.2010 09:03, Claudia....@ricoh-europe.com wrote:
>>
>> Hello,
>>
>>
>> Our Company uses Atlassian Crowd for Single Sign-On. We already have
>> Apache * Subversion integrated with Crowd. Now we would like to
>> integrate TortoiseSVN too. Crowd uses Cookies as SSO tokens. My
>> question
>> is: Does TortoisesSVN supports Cookies? Or it will ignore them? Can I
>> configure it?

> Cookies are for web browsers. TSVN and Subversion are not browsers and therefore don't support cookies.


Cookies are for HTTP clients. There are many programmatic HTTP clients that support cookies that are not browsers. For example: http://hc.apache.org/httpclient-3.x/cookies.html

As an HTTP client, TortoiseSVN could choose to support or not support cookies -- it's just a matter of honoring the "Set-Cookie" HTTP header.

However, I don't think this problem or feature request would be specific to TortsoiseSVN, as the HTTP client is actually the Subversion binaries themselves. Seems like cookie support is a feature request that should be submitted to core Subversion and baked-in, so that ALL subversion clients that support HTTP would support cookies...

-----Message Disclaimer-----

This e-mail message is intended only for the use of the individual or
entity to which it is addressed, and may contain information that is
privileged, confidential and exempt from disclosure under applicable law.
If you are not the intended recipient, any dissemination, distribution or
copying of this communication is strictly prohibited. If you have
received this communication in error, please notify us immediately by
reply email to Con...@principal.com and delete or destroy all copies of
the original message and attachments thereto. Email sent to or from the
Principal Financial Group or any of its member companies may be retained
as required by law or regulation.

Nothing in this message is intended to constitute an Electronic signature
for purposes of the Uniform Electronic Transactions Act (UETA) or the
Electronic Signatures in Global and National Commerce Act ("E-Sign")
unless a specific statement to the contrary is included in this message.

While this communication may be used to promote or market a transaction
or an idea that is discussed in the publication, it is intended to provide
general information about the subject matter covered and is provided with
the understanding that The Principal is not rendering legal, accounting,
or tax advice. It is not a marketed opinion and may not be used to avoid
penalties under the Internal Revenue Code. You should consult with
appropriate counsel or other advisors on all matters pertaining to legal,
tax, or accounting obligations and requirements.

------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2687580

Stefan Küng

unread,
Dec 3, 2010, 9:53:08 AM12/3/10
to us...@tortoisesvn.tigris.org
On 03.12.2010 15:51, Feldhacker, Chris wrote:
> -----Original Message----- From: Stefan Küng
> [mailto:torto...@gmail.com] Sent: Friday, December 03, 2010 8:40
> AM To: us...@tortoisesvn.tigris.org Subject: Re: Does TortoiseSVN
> supports cookies?
>
>> On 03.12.2010 09:03, Claudia....@ricoh-europe.com wrote:
>>>
>>> Hello,
>>>
>>>
>>> Our Company uses Atlassian Crowd for Single Sign-On. We already
>>> have Apache * Subversion integrated with Crowd. Now we would like
>>> to integrate TortoiseSVN too. Crowd uses Cookies as SSO tokens.
>>> My question is: Does TortoisesSVN supports Cookies? Or it will
>>> ignore them? Can I configure it?
>
>> Cookies are for web browsers. TSVN and Subversion are not browsers
>> and therefore don't support cookies.
>
>
> Cookies are for HTTP clients. There are many programmatic HTTP
> clients that support cookies that are not browsers. For example:
> http://hc.apache.org/httpclient-3.x/cookies.html
>
> As an HTTP client, TortoiseSVN could choose to support or not support
> cookies -- it's just a matter of honoring the "Set-Cookie" HTTP
> header.

SVN clients do NOT really use http but the WebDAV protocol. Therefore
svn clients are not http clients.


> However, I don't think this problem or feature request would be
> specific to TortsoiseSVN, as the HTTP client is actually the
> Subversion binaries themselves. Seems like cookie support is a
> feature request that should be submitted to core Subversion and
> baked-in, so that ALL subversion clients that support HTTP would
> support cookies...

Correct.

Stefan

--
___
oo // \\ "De Chelonian Mobile"
(_,\/ \_/ \ TortoiseSVN
\ \_/_\_/> The coolest Interface to (Sub)Version Control
/_/ \_\ http://tortoisesvn.net

------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2687581

David Huang

unread,
Dec 3, 2010, 10:37:40 AM12/3/10
to us...@tortoisesvn.tigris.org
On Dec 3, 2010, at 8:53 AM, Stefan Küng wrote:
> SVN clients do NOT really use http but the WebDAV protocol. Therefore
> svn clients are not http clients.

That's overstating the situation, since WebDAV is an extension to HTTP: "HTTP Extensions for Distributed Authoring -- WEBDAV", http://www.ietf.org/rfc/rfc2518.txt

A WebDAV client shouldn't omit the HTTP/1.1 "Host:" header because it's a WebDAV client and not an HTTP client. And it shouldn't ignore the Set-Cookie header because it's a WebDAV client and not an HTTP client. Certainly, there may be other reasons to not accept cookies, but "oh, it's WebDAV, not HTTP" isn't one of them.

------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2687591

Reply all
Reply to author
Forward
0 new messages