[Catalyst] Catalyst::Plugin::Session, Facebook, and Custom Session ids

[Jay Buffington]

I did something like this.  With Session::State::Cookie the session id
comes out of the cookie.  I wanted web service calls using REST to be
able to use that same session id, but pass it as a http parameter
(called token) rather than in the cookie.

With the below code catalyst will first look for the session in in a
url param like this:
http://myapp.com/foo?token=af3423e342dac987d8e0a0e

If there is no token param the NEXT will cause it to fall back to
Session::State::Cookie and look for the session id in the cookie.

*** in MyApp.pm ***
use Catalyst qw/
  Session::State::Token
  Session::State::Cookie
/;


*** in Catalyst/Plugin/Session/State/Token.pm ***
package Catalyst::Plugin::Session::State::Token;
use base qw/Catalyst::Plugin::Session::State/;

use strict;
use warnings;

use NEXT;

our $VERSION = "0.01";

sub get_session_id {
    my $c = shift;

    my $session_id = $c->request->params->{token};
    if ( $session_id ) {
        $c->log->debug(qq/Found sessionid "$session_id" in request
parameter/) if $c->debug;
        return $session_id;
    }

    $c->NEXT::get_session_id(@_);
}

1;



On 5/30/07, Jim Spath <jspath at pangeamedia.com> wrote:
> I'm currently using the following plugins for session management in my
> Catalyst app:
>
>   Session
>   Session::Store::Memcached
>   Session::State::Cookie
>   Session::DynamicExpiry
>
> Along with the following authentication plugins:
>
>   Authentication
>   Authentication::Store::DBIC
>   Authentication::Credential::Password
>
> It all works great on my site... however, I was looking to integrate our
> app into Facebook, and to have users login to our service through Facebook.
>
> For every request, they will be passing an parameter called fb_sig_user,
> which I should be using as a session id on our side.
>
> I was wondering if there was a way that I could override the automatic
> creation of session ids with the Facebook id, while also continuing to
> use my current setup for onsite users?  I've looked through the docs and
> searched a bit and am unclear on this.
>
> Thanks!
> Jim
>
> _______________________________________________
> List: Catalyst at lists.rawmode.org
> Listinfo: http://lists.rawmode.org/mailman/listinfo/catalyst
> Searchable archive: http://www.mail-archive.com/catalyst@lists.rawmode.org/
> Dev site: http://dev.catalyst.perl.org/
>