Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@couchdb.apache.org
MIME-Version: 1.0
In-Reply-To: 
 <CAN5SjABX8t_9r0ivFonEt4w=7AjKWR28tMgdy8XrmpT7==V5CQ@mail.gmail.com>
References: 
 <CAN5SjABX8t_9r0ivFonEt4w=7AjKWR28tMgdy8XrmpT7==V5CQ@mail.gmail.com>
Date: Fri, 3 May 2013 14:43:04 +0100
Message-ID: 
 <CABvT1DEVDXRc2YqAwbx-5Jaipv=fDXqUgywUN7rpqZ6uj_PEAQ@mail.gmail.com>
Subject: Re: how to create cookie-session for an other user?
From: Robert Newson <rnewson@apache.org>
To: "user@couchdb.apache.org" <user@couchdb.apache.org>
Content-Type: text/plain; charset=KOI8-R
Content-Transfer-Encoding: quoted-printable

You can't because, if you think about it, if you could login as
someone without knowing their password it would defeat the purpose of
authentication. :)

B.

On 3 May 2013 13:51, Michael Bykov <m.bykov@gmail.com> wrote:
> Hi,
>
> I use a node-server along with couchdb. With passport.js I can authentica=
te
> user with third-party oAuth provider, ok. I got this user in CouchDB.
>
> Now I like to set an session cookie in CouchDB and redirect it to main ho=
st
> which is couchapp.
>
> I could do this simply with:
>
> curl -X POST -i localhost:5984/_session?next=3D/myhost.org -d name=3Dme -=
d
> password=3Dsecret
>
> but I know only hashed-password, not plain text password for this user.
>
> How I can create session cookie for this user with hashed-password, _id,
> _rev, etc,  but without the plain password?
>
>
> --
> =ED.
>
> http://diglossa.ru
> xmpp://m.bykov@jabber.ru