|
Server 0.0.1
HTTP/REST server implementation
|
store the cookie count in the request to make a simple check possible to prevent this lookup if no cookies exists at all
This is an application authorization not an HTTP authorization...anyway think about sending HTTP 401 messages if authorization is required and think about sending the credentials via header as described in the HTTP protocol. Most likely this will lead to hacky thing with javascript as i am not sure how far this is implemented within browsers. Anyway, for now we simply ignore a failed login within the response except that no session is initialized. We send an empty 200 OK