[sldev] Re: [VWR] Web login without llmozlib

[Donovan Preston]

On Dec 20, 2007, at 1:26 PM, Argent Stonecutter wrote:

> On 2007-12-20, at 15:22, Donovan Preston wrote:
>> Ok, I think the distinction should be 303 (success, proceed) and  
>> 307 (temporary correctable failure, go to the location header to  
>> correct).
>>
>> In order to be able to distinguish between what type of failure has  
>> occurred, I think the 307 response should have an LLSD body  
>> containing an error code and a human readable message. If the error  
>> code matches the "user entered password wrong" code, a thin ui can  
>> discover that info by reading the body.
>
> What's wrong with including the human readable message after the  
> 307? That's what that part of the HTTP protocol is for.

That's fine too. How about both, so that the Reason can be used as the  
machine readable version, and the body could contain additional  
metadata such as a human readable version.

Donovan