Re: authentication re-vamp

On Thu, Sep 13, 2001 at 05:06:25PM -0500, Ben Collins-Sussman wrote:
> E. Push vs. Pull models. [HARD]

This is not really hard (though the current implementation may make it
lots of work). Having a callback to request username/password from the
user on demand is not hard.

(I hacked up an auth implementation which was about three lines of
changes which worked properly using "pull", then the current stuff got
committed and I got left behind... ;)

> F. Method negotiation? [HARD]
>
> Can the RA library (running client-side) 'discover' what methods
> are supported by the server?

No, not really; why do you want this, out of interest?

HTTP authentication is challenge-response, so until you actually try
what it is you're going to do, you don't know how (if at all) you are
going to be challenged.

joe

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Sat Oct 21 14:36:41 2006