wip

diff --git a/TODO b/TODO
index 9f0b1fdc3623bdbbe19f419c1e350d8274219446..e2ceefc5289e416bb1e5d81dd32bebf1621fa5ee 100644 (file)
--- a/TODO
+++ b/TODO
@@ -1,10 +1,8 @@
 REQUEST_METHOD=post CAHTEST_HOME=`pwd` ./test.cgi ; echo
 
 
 REQUEST_METHOD=post CAHTEST_HOME=`pwd` ./test.cgi ; echo
 
 

-make parameter values hash of cookie values
-
-<input type="submit" name="ARRAY(0x9742318)" value="Login"></td></tr>
+sort out debugging

 
 

-cookie header not generated
+make parameter values hash of cookie values

 
 missing hidden parameter
 
 missing hidden parameter

diff --git a/cgi-auth-hybrid.pm b/cgi-auth-hybrid.pm
index 6453779c2a6d7234930b4944a33613e09aa81599..21a8fb523e875ef82339283e2de05542ca332edf 100644 (file)
--- a/cgi-auth-hybrid.pm
+++ b/cgi-auth-hybrid.pm
@@ -119,7 +119,7 @@ sub gen_plain_login_form ($$) {
                 ' name="'.$r->{S}{password_param_name}.'"></td></tr>');
     push @form, ('<tr><td colspan="2">',
                 '<input type="submit"'.
                 ' name="'.$r->{S}{password_param_name}.'"></td></tr>');
     push @form, ('<tr><td colspan="2">',
                 '<input type="submit"'.

-                ' name="'.$r->{S}{login_submit_name}.'"'.
+                ' name="'.$r->{S}{login_submit_name}[0].'"'.

                 ' value="'.$r->_gt('Login').'"></td></tr>',
                 '</table>');
     foreach my $n (keys %$params) {
                 ' value="'.$r->_gt('Login').'"></td></tr>',
                 '</table>');
     foreach my $n (keys %$params) {


@@ -154,6 +154,7 @@ sub new_verifier {
            associdlen => 128, # bits
            login_timeout => 86400, # seconds
            assoc_param_name => 'cah_associd',
            associdlen => 128, # bits
            login_timeout => 86400, # seconds
            assoc_param_name => 'cah_associd',

+           cookie_name => "cah_associd",

            password_param_name => 'password',
            username_param_names => [qw(username)],
            form_entry_size => 60,
            password_param_name => 'password',
            username_param_names => [qw(username)],
            form_entry_size => 60,


@@ -176,7 +177,7 @@ sub new_verifier {
            do_redirect => \&do_redirect_cgi, # this hook is allowed to throw
            cookie_path => "/",
            get_cookie_domain => \&get_cookie_domain,
            do_redirect => \&do_redirect_cgi, # this hook is allowed to throw
            cookie_path => "/",
            get_cookie_domain => \&get_cookie_domain,

-           encrypted_only => 0,
+           encrypted_only => 1,

            gen_start_html => sub { $_[0]->start_html($_[2]); },
            gen_end_html => sub { $_[0]->end_html(); },
            gen_login_form => \&gen_plain_login_form,
            gen_start_html => sub { $_[0]->start_html($_[2]); },
            gen_end_html => sub { $_[0]->end_html(); },
            gen_login_form => \&gen_plain_login_form,


@@ -305,13 +306,14 @@ sub construct_cookie ($$$) {
     my ($r, $cookv) = @_;
     return undef unless $cookv;
     my $c = $r->{Cgi};
     my ($r, $cookv) = @_;
     return undef unless $cookv;
     my $c = $r->{Cgi};

-    my $cookie = $c->cookie(-name => $r->{S}{cookie_name},
+my @ca = (-name => $r->{S}{cookie_name},

                              -value => $cookv,
                              -path => $r->{S}{cookie_path},
                              -domain => $r->_ch('get_cookie_domain'),
                              -expires => '+'.$r->{S}{login_timeout}.'s',
                              -secure => $r->{S}{encrypted_only});
                              -value => $cookv,
                              -path => $r->{S}{cookie_path},
                              -domain => $r->_ch('get_cookie_domain'),
                              -expires => '+'.$r->{S}{login_timeout}.'s',
                              -secure => $r->{S}{encrypted_only});

-print STDERR "CC $r $c $cookv $cookie\n";
+    my $cookie = $c->cookie(@ca);
+print STDERR "CC $r $c $cookv $cookie (@ca).\n";

     return $cookie;
 }
 
     return $cookie;
 }
 


@@ -678,7 +680,7 @@ sub check_ok ($) {
 
     $r->_print($r->{Cgi}->header($r->_cgi_header_args($cookie)),
               $r->_ch('gen_start_html',$title),
 
     $r->_print($r->{Cgi}->header($r->_cgi_header_args($cookie)),
               $r->_ch('gen_start_html',$title),

-              @body,
+              (join "\n", @body),

               $r->_ch('gen_end_html'));
     return 0;
 }
               $r->_ch('gen_end_html'));
     return 0;
 }

diff --git a/test.cgi b/test.cgi
index 59b7976a18d47273d77d9ccda6f9f6fa417de1b6..05cc46ffa219425f27ccc3d87968e094079652e6 100755 (executable)
--- a/test.cgi
+++ b/test.cgi
@@ -11,6 +11,7 @@ my $dump = "$ENV{'CAHTEST_HOME'}/dump";
 my $verifier = CGI::Auth::Hybrid->new_verifier(
    assocdb_path => "$dump/assoc.db",
    username_password_ok => sub { my ($c,$r,$u,$p)=@_; return $p eq 'sesame'; },
 my $verifier = CGI::Auth::Hybrid->new_verifier(
    assocdb_path => "$dump/assoc.db",
    username_password_ok => sub { my ($c,$r,$u,$p)=@_; return $p eq 'sesame'; },

+   encrypted_only => 0,

 );
 
 END { $verifier->disconnect() if $verifier; }
 );
 
 END { $verifier->disconnect() if $verifier; }