Lukas Trejtnar
l.trejtnar at open.ac.uk
Wed Oct 27 05:55:50 EDT 2004
Hi, I'm trying to implement a session management together with an authentification procedure. I have a folder which contains PSP (my_pages). When a user accesses my_pages for the first time, an authentification dialogue box is invoked, a user is authentified and new session is created (with timeout 300s). User happily browses my_pages. Now, if s/he is inactive for more than 300s and starts browsing again, new session is created. It's fine, but I would like to force the authentification dialogue box to appear again before a session creation. How can I do that? Here is my code: Apache config: <Directory "C:/Program Files/Apache Group/Apache2/htdocs/my_pages"> AddHandler mod_python .py PythonHandler mod_python.publisher PythonAuthenHandler handlers PythonDebug On AuthType Basic AuthName "Restricted Area" require valid-user PythonOption ApplicationPath '/' </Directory> handlers.py file: from mod_python import apache, Session def authenhandler(req): req.session = Session.Session(req, timeout=300) passwd = req.get_basic_auth_pw() user = req.user if req.session.is_new(): req.session['passwd'] = passwd req.session['user'] = user req.session.save() if passwd == "spam" and user == "eggs": return apache.OK else: return apache.HTTP_UNAUTHORIZED Thanks, Lukas
|