[Catalyst] Catalyst::Plugin::Session, Facebook, and Custom Session ids

[Yuval Kogman]

The code below is essentially Catalyst::Plugin::Session::State::URI
with param set to 'token'.


On Wed, May 30, 2007 at 23:00:06 -0700, Jay Buffington wrote:
> I did something like this.  With Session::State::Cookie the session id
> comes out of the cookie.  I wanted web service calls using REST to be
> able to use that same session id, but pass it as a http parameter
> (called token) rather than in the cookie.
> 
> With the below code catalyst will first look for the session in in a
> url param like this:
> http://myapp.com/foo?token=af3423e342dac987d8e0a0e
> 
> If there is no token param the NEXT will cause it to fall back to
> Session::State::Cookie and look for the session id in the cookie.
> 
> *** in MyApp.pm ***
> use Catalyst qw/
>  Session::State::Token
>  Session::State::Cookie
> /;
> 
> 
> *** in Catalyst/Plugin/Session/State/Token.pm ***
> package Catalyst::Plugin::Session::State::Token;
> use base qw/Catalyst::Plugin::Session::State/;
> 
> use strict;
> use warnings;
> 
> use NEXT;
> 
> our $VERSION = "0.01";
> 
> sub get_session_id {
>    my $c = shift;
> 
>    my $session_id = $c->request->params->{token};
>    if ( $session_id ) {
>        $c->log->debug(qq/Found sessionid "$session_id" in request
> parameter/) if $c->debug;
>        return $session_id;
>    }
> 
>    $c->NEXT::get_session_id(@_);
> }
> 
> 1;
> 
> 
> 
> On 5/30/07, Jim Spath <jspath at pangeamedia.com> wrote:
> >I'm currently using the following plugins for session management in my
> >Catalyst app:
> >
> >  Session
> >  Session::Store::Memcached
> >  Session::State::Cookie
> >  Session::DynamicExpiry
> >
> >Along with the following authentication plugins:
> >
> >  Authentication
> >  Authentication::Store::DBIC
> >  Authentication::Credential::Password
> >
> >It all works great on my site... however, I was looking to integrate our
> >app into Facebook, and to have users login to our service through Facebook.
> >
> >For every request, they will be passing an parameter called fb_sig_user,
> >which I should be using as a session id on our side.
> >
> >I was wondering if there was a way that I could override the automatic
> >creation of session ids with the Facebook id, while also continuing to
> >use my current setup for onsite users?  I've looked through the docs and
> >searched a bit and am unclear on this.
> >
> >Thanks!
> >Jim
> >
> >_______________________________________________
> >List: Catalyst at lists.rawmode.org
> >Listinfo: http://lists.rawmode.org/mailman/listinfo/catalyst
> >Searchable archive: http://www.mail-archive.com/catalyst@lists.rawmode.org/
> >Dev site: http://dev.catalyst.perl.org/
> >
> 
> _______________________________________________
> List: Catalyst at lists.rawmode.org
> Listinfo: http://lists.rawmode.org/mailman/listinfo/catalyst
> Searchable archive: http://www.mail-archive.com/catalyst@lists.rawmode.org/
> Dev site: http://dev.catalyst.perl.org/

-- 
  Yuval Kogman <nothingmuch at woobling.org>
http://nothingmuch.woobling.org  0xEBD27418