Private/index.html

   1 <html>
   2 <head>
   3 <title>
   4         Private data
   5 </title>
   6 <script type="text/javascript">
   7 <SCRIPT TYPE="text/ssperl" SRC="./JavaScript/CGIscriptorSession.js"></SCRIPT>
   8
   9 window.onload = function() {
  10         loadSessionData (CGIscriptorSessionType, CGIscriptorChallengeTicket);
  11         return true;
  12 };
  13
  14 </script>
  15
  16 <script type="text/javascript">
  17 <SCRIPT TYPE="text/ssperl" SRC="./JavaScript/sha.js"></SCRIPT>
  18 </script>
  19 </head>
  20 <body>
  21 <p ALIGN=RIGHT><a href="?LOGOUT">Logout</a></p>
  22 <p ALIGN=RIGHT><a href="ChangePassword.html">Change Password</a><br />
  23 <a href="CreateUser.html">Create New User Account</a>
  24 </p>
  25
  26 <h1 align=CENTER>Private data: You are now logged in as <em><script type="text/ssperl" CGI='$LOGINUSERNAME=""'>$LOGINUSERNAME</script></em></h1>
  27 <p align=CENTER>Logged in from <script type="text/ssperl" CGI='$LOGINIPADDRESS="" $LOGINPATH="" $SESSIONTYPE @CAPABILITIES="TEST"'>
  28         my $Caps = "(".join(", ",@CAPABILITIES).")" if @CAPABILITIES;
  29         "$LOGINIPADDRESS $LOGINPATH <br />Session type: $SESSIONTYPE $Caps";
  30 </script></p>
  31 <p align=CENTER><a href="manual.html">Go to manual</a></p>
  32
  33 <A NAME="SESSIONTICKETS"><H2 ALIGN="CENTER">SERVER SIDE SESSIONS AND ACCESS CONTROL (LOGIN)</H2></A>
  34 <p>
  35 An infrastructure for user acount authorization and file access control
  36 is available. Each request is matched against a list of URL path patterns.
  37 If the request matches, a Session Ticket is required to access the URL.
  38 This Session Ticket should be present as a CGI parameter or Cookie:
  39 </p>
  40 <p>
  41 CGI: SESSIONTICKET=&lt;value&gt;<br />
  42 Cookie: CGIscriptorSESSION=&lt;value&gt;</p>
  43 <p>
  44 The example implementation stores Session Tickets as files in a local
  45 directory. To create Session Tickets, a Login request must be given
  46 with a LOGIN=&lt;value&gt; CGI parameter, a user name and a (doubly hashed)
  47 password. The user name and (singly hashed) password are stored in a
  48 PASSWORD ticket with the same name as the user account (name cleaned up
  49 for security).
  50 </p>
  51
  52 </body>
  53 </html>