perl-modperl-cvs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Geoffrey Young <>
Subject Re: cvs commit: modperl-2.0 Changes
Date Thu, 13 Feb 2003 13:25:52 GMT

>   +package Apache::Connection;
>   +
>   +# auth_type and user records don't exist in 2.0 conn_rec struct
>   +# 'PerlOptions +GlobalRequest' is required
>   +sub auth_type { Apache->request->auth_type }
>   +sub user      { Apache->request->user      }
>   +
>    1;
>    __END__

I think this may need a bit more thought (or at least more explanation).

in 1.0 there is both $r->auth_type and $c->auth_type, and they have 
different meanings.

$r->auth_type represents the AuthType from the config (via 
r->per_dir_config).  when you get $r->auth_type, you're asking what kind of 
authentication is configured for the request.

$c->auth_type is populated by authen handlers, after the user has been 
authenticated, with whatever authentication method was used.  I'm not sure 
about the history of this, but I suppose in theory it is possible for a 
client to request Digest auth, but the server fall back to Basic.

at any rate, I don't know how the current 2.0 or 2.1 aaa stuff handles this 
difference, if at all, but we (well, I :) need to be clear on how that works 
before agreeing that $r->connection->auth_type in Apache::Compat is the same 
as $r->auth_type.


View raw message