Re: Apache2::Cookie troubles... sanity check needed on auth/sess handling

OK, I've not made any progress on this an I'm getting a bit frustrated. Some notes on the other comments and what I've done:

Apache::Cookie->bake calls $r->err_headers_out->add('Set-Cookie' => $cookie) and thats all it does.

81:       sub bake {
82:      my ($c, $r) = @_;
83:      $r->err_headers_out->add("Set-Cookie", $c->as_string);
84:      }
[download]

I used all the typical debug stuff and I'm absolutely sure the values I think are going are there, what I can't see is what's happening with the cookie.

I installed LiveHTTPHeaders on firefox and I'm getting cookie set in both the request and response header if I stop the page from forwarding, but once I let mason forward back to the URL passed in, it is in neither.

The latest version of the code is

<%init>
use Apache2::Const -compile => qw(REDIRECT);

my $item;
my $date;
my @line;
my $res = User->validate($AuthDBH, $ARGS{username}, $ARGS{password});

my $url = "/";

if (length($ARGS{ret_url}) > 1)
{
  $url = $ARGS{ret_url};
}

if ($res->{res})
{
  my $MAC = Digest::SHA1::sha1_hex($ARGS{username}, "Get the S1gnal!")
+;

  my $cookie = Apache2::Cookie->new
       ( $r,
         -name  => 'user_login',
         -value => { $ARGS{username} . "," . $MAC },
#         -path  => '/',
#         -domain  => '.dobson.net',
         -expires => '+1M',
       );
  $r->err_headers_out ->add('Set-Cookie' => $cookie->as_string);
  $r->headers_out->set(Location => $url);
#  return Apache2::Const::REDIRECT;
}
else
{

  if (index($ARGS{ret_url}, '?') >= 0)
  {
    $url .= "&login_error=$res->{error_msg}";
  }
  else
  {
    $url .= "?login_error=$res->{error_msg}";
  }
}

#$url= "/index.html";
$m->redirect($url);
</%init>

<%flags>
  inherit=> '/syshandler'
</%flags>

<% $url %>
login_submit.html: 65 lines, 1088 characters.
[download]

I keep rereading the responses sent and trying a million different variations from references I've googled up... this cannot be this difficult.

Thanks

--Jimbus aka Jim Babcock
Wireless Data Engineer and Geek Wannabe
jim-dot-babcock-at-usa-dot-com

Comment on Re: Apache2::Cookie troubles... sanity check needed on auth/sess handling Select or Download Code