[Zope-CMF] Login/logout information

Tres Seaver tseaver@digicool.com
Wed, 11 Apr 2001 15:16:34 -0400 (EDT)


On Wed, 11 Apr 2001, Ben Riga wrote:

> >>>>
> You would need to tweak / override
> 'CMFCore.CookieCrumbler.CookieCrumbler.setAuthCookie' such that
> it appends 'expires="Never"' to the call to 'resp.setCookie'
> (line 153).
> <<<<
> 
> I tried making this one change and it really messed up the
> login cookie.  CMF started getting really confused about
> whether I was logged in or not.  I'm backing the change out.
> 
> Having looked at the CookieCrumbler code a little closer, it
> looks like this setting is used at least a few other places.
> I'll study the code and then try to make the change.

I just checked in a change to CookieCrumbler, plus two new
FSPythonMethods, to allow a CMF Site manager to override the
default cookie construction by customizing the methods in the
skins tool:

  http://cvs.zope.org/CMF/CMFCore/CookieCrumbler.py.diff?r1=1.2&r2=1.3

  http://cvs.zope.org/CMF/CMFDefault/skins/control/expireAuthCookie.py

  http://cvs.zope.org/CMF/CMFDefault/skins/control/setAuthCookie.py

Tres.
-- 
===============================================================
Tres Seaver                                tseaver@digicool.com
Digital Creations     "Zope Dealers"       http://www.zope.org