Re: authenticate user through URL
Re: authenticate user through URL
- Subject: Re: authenticate user through URL
- From: Marek Wawrzyczny <email@hidden>
- Date: Tue, 18 Nov 2003 14:51:35 +1100
You can have an HTML url, but I for one have my email client set up to
ignore html parts and only shaw the text part.
Personally I hate HTML emails unless I really trust the sender and want
to view the content (which is rare indeed).
Of course if you send the url as text, you'll have the problem where
email clients will truncate the url (if it does not fit the line char
limit) making the user go to an invalid url.
Our workaround was to use apache's rewrite rules to rewrite a short
version of the url to it's proper version. For example, the following
url:
http://www.mydomain.com/cgi-bin/WebObjects/myApp.woa/wa/DirectAction/
authenticate?<users email address>&<a random number that represents a
temporary password>
becomes
http://www.mydomain.com/myApp/authenticate?<users email address>&<a
random number that represents a temporary password>
I am not an expert on rewrite rules in Apache, so I cannot help you
there (someone else does that here) and of course if you are not using
Apache then this may/may not be an option anyway.
On Tuesday, Nov 18, 2003, at 13:34 Australia/Sydney, Michael Warner
wrote:
Step 1: a user sends me his/her email address.
Step 2: I send an email back to that address that contains a long
URL like:
.../wa/DirectAction/authenticate?<users email address>&<a random
number that represents a temporary password>
Step 3: When users click on the URL, they will be taken to a page that
allows them to register
for the site if the email and temp password match one of the records
in the TempPerson table.
QUESTION:
Is it possible to set things up so that in the email, the user sees
something like: 'click here' such that
that 'click here' hyperlink points to the long URL above (without the
user seeing the long URL)?
I am not so much concerned with security issues, but rather with
creating convenient and reliable
hyperlink.
Thank you,
Mike W.
Marek Wawrzyczny
software engineer
-------------------------->
ish group pty ltd
7 Darghan St Glebe 2037 Australia
phone +61 2 9660 1400 fax +61 2 9660 7400
http www.ish.com.au | email email@hidden
_______________________________________________
webobjects-dev mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/webobjects-dev
Do not post admin requests to the list. They will be ignored.