[sldev] Re: [VWR] Web login without llmozlib
Matthew Dowd
matthew.dowd at hotmail.co.uk
Tue Dec 18 15:27:42 PST 2007
Does even need to store anything locally if what is returned is a proper HTTP redirect. In which case what is needed is for the client to open the redirected URL returned in the internal browser (if present) or else an external one.
This is something which Argent and myself have been arguing for, for some time, and means that LL can implement all the anti fraud stuff but retaining the logon UI within the client.
True, LL can suddenly change the UI to add SecureID or the like overnight, but
a) we have assurances from LL that they won't change the parameters returned to the new authentication web CGI script without notice
b) changing how people authenticate would need a long lead time (testing etc.) anyway so not to loose users
Matthew
BTW another observation on the new webform UI - my impression is that the webpage downloaded includes everything (splash screen, blog posts, status, etc. ) as well as the username/password boxes? As such, it makes it difficult for someone writing a third party viewer who wishes to customise this (e.g. adding third party browser specific blog posts, status, splash screen, etc.) which means those wanting such customisation will bypass the LL logon webform and use their own (or own UI). Wouldn't it have been better to keep the authentication part to a seperate dedicated web form?
----------------------------------------
> From: nicholaz at blueflash.cc
> Subject: Re: [sldev] Re: [VWR] Web login without llmozlib
> Date: Tue, 18 Dec 2007 23:08:19 +0100
> To: tess at lindenlab.com
> CC: sldev at lists.secondlife.com
>
>
> On 18.12.2007, at 22:35, Tess Chu wrote:
>> The tricky part here is what to do when login fails. Now that
>> authentication is web based, when clients built with llmozlib sees
>> a failure, the web code will do the logic to redirect to a
>> different page asking for more information. i.e. when your
>> password is wrong, it redirects back to the original splash page
>> with an error message. Without llmozlib, the only valid response
>> would be to error, message, and reset or exit.
>
> It could store the result page locally as a file and launch a local
> web browser showing it, to give the user an idea what's happening.
>
>
> Nick
> _______________________________________________
> Click here to unsubscribe or manage your list subscription:
> /index.html
_________________________________________________________________
Telly addicts unite!
http://www.searchgamesbox.com/tvtown.shtml
More information about the SLDev
mailing list