databinder-3 bind auth cookie to ip address
Created by: nathan
on: 9/25/07
Updated by: nathan
on: 10/17/07
Assigned to:

The cookie used for Databinder authentication is not restricted by IP. It should be, with the address as part of the hash.
databinder-4 databinder dispatch script should respond to 'stop'
databinder-5 databinder dispatch plain HTTP
databinder-6 Access to QueryPanel
databinder-7 auth components need localizable strings
databinder-8 blob size validation
databinder-9 buildr plugin
databinder-10 DataApplication initialization
databinder-11 please reconsider IDataApplication.isDataBrowserAllowed()
databinder-12 Add target directory to svn.ignore
databinder-15 remove button for IterableEntityView
databinder-16 DataServer path-finding problems
databinder-17 DataBinder-AO hard-codes property names
databinder-18 NPE trying to sign in as non-existent user
databinder-20 [ActiveObjects] Passing Null Values to DBParam
databinder-21 TextileLabel Fails to Render Valid Markup
databinder-22 [DataStaticService] ensureSession disregards key
databinder-23 arrows in baseball ex
databinder-24 rollbacks should warn
databinder-25 graffiti bad query

Enter new issue

[databinder-3] bind auth cookie to ip address edit

Comments

nathan (10/18/07)

CookieAuth.token now takes a location parameter which can be any string to bind the cookie to a particular location. The default implementation in AuthDataApplication uses a concatenation of the forwarded-by header and the request’s reported IP address.