<br><div class="gmail_quote">On Wed, Jun 10, 2009 at 11:07 AM, Charlie Garrison <span dir="ltr"><<a href="mailto:garrison@zeta.org.au">garrison@zeta.org.au</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<br><div class="im">
<br></div>
You might be looking for mod_auth_tkt. There is also x-sendfile but I don't have experience with that one.<br>
</blockquote><div><br><br><br>mod_auth_tkt looks interesting but I wonder if it would interrupt the normal flow of the application in case the session expires. <br><br>from <a href="http://www.openfusion.com.au/labs/mod_auth_tkt/">http://www.openfusion.com.au/labs/mod_auth_tkt/</a><br>
<br><br><blockquote style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;" class="gmail_quote">Requests without a valid ticket are redirected to
a configurable URL which is expected to validate the user and generate a
ticket for them. This package includes a Perl module and working CGI
scripts for generating the cookies, as well as contributed classes for
PHP and Python environments.<br></blockquote><br><br>For example, imagine it expires while a user is filling out a lengthly form and a drop down menu triggers an XMLHttpRequest. Would she be redirected to the authentication form and loose all the information already typed? <br>
<br><br><br><br></div></div><br>