[sldev] Re: [VWR] Web login without llmozlib

[Argent Stonecutter]

On 2007-12-20, at 15:22, Donovan Preston wrote:
> Ok, I think the distinction should be 303 (success, proceed) and  
> 307 (temporary correctable failure, go to the location header to  
> correct).
>
> In order to be able to distinguish between what type of failure has  
> occurred, I think the 307 response should have an LLSD body  
> containing an error code and a human readable message. If the error  
> code matches the "user entered password wrong" code, a thin ui can  
> discover that info by reading the body.

What's wrong with including the human readable message after the 307?  
That's what that part of the HTTP protocol is for.