[sldev] [Upcoming Changes] Website Viewer Authentication

Donovan Linden donovan at lindenlab.com
Fri Sep 28 15:22:53 PDT 2007


Yes, this is exactly how the implementation works, except it's C++  
that passes data between the browser and the viewer, not javascript :-).

Donovan

On Sep 28, 2007, at 3:19 PM, Erik Hill wrote:

> Going off a bit..
>
> Couldnt a similar method be applied within the client, replace the  
> login area with another embedded webpage.   Use javascript to pass  
> data between the embedded browser and the client (i believe that  
> would be possible with Firefox's embedded browser)
>
> That way you could get the best of both worlds.
> It would enable you to do the idea here, and still enable opensim -  
> they would have to generate there own webpage for the login
>
>
> On 9/28/07, Donovan Linden <donovan at lindenlab.com> wrote:
> The web_login_key must be given to login.cgi within 5 minutes, or  
> it expires.
>
> Bots will require additional work to log in using the new scheme,  
> which involves POSTing the username and password to a well-known  
> web location, and retrieving the web_login_key from the Location:  
> header of the reply, before passing the web_login_key to login.cgi.
>
> However, the first iteration will continue to support the old login  
> method of passing the username and password to login.cgi, so bots  
> which log in using the old method will continue to work for a while  
> longer.
>
> Donovan
>
> On Sep 28, 2007, at 2:57 PM, Erik Anderson wrote:
>
>> How long would these secondlife:// authentications last?  it seems  
>> that without some additional work this would effectively remove  
>> the ability to run bots.
>>
>> On 9/28/07, Harold Brown <labrat.hb at gmail.com > wrote:
>> This does seem to pose another issue....  What if I want to use  
>> multiple clients?  You wouldn't be able to pick which client to  
>> use, Standard, RC, First Look, Nicholaz, SLeek.. etc.
>>
>>
>> On 9/28/07, Candide LeMay < candide.lemay at gmail.com > wrote:
>> from the wiki:
>>
>> '"I have separate accounts that I use. How does this affect me?"
>>
>> Yes. If you wish to use a separate Second Life account, you must log
>> out of your current account on the website and then log in with your
>> separate account.'
>>
>> that's very cumbersome! I have several accounts (work, testing etc) I
>> use daily and often at the same time (running several SL instances at
>> once). I don't want to be logging in and out all the time on a
>> website. On top of that, I start SL with a script, to feed it command
>> line switches (for allowing multiple instances), start with lower
>> priority, various stuff. I don't want the only way to start SL to be
>> via secondlife://
>>
>> candide
>> _______________________________________________
>> Click here to unsubscribe or manage your list subscription:
>> /index.html
>>
>>
>> _______________________________________________
>> Click here to unsubscribe or manage your list subscription:
>> /index.html
>>
>>
>> _______________________________________________
>> Click here to unsubscribe or manage your list subscription:
>> /index.html
>
>
> _______________________________________________
> Click here to unsubscribe or manage your list subscription:
> /index.html
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.secondlife.com/pipermail/sldev/attachments/20070928/c52e5194/attachment.htm


More information about the SLDev mailing list