wiki:Specs/WalkThrough/CrossDomainAuthCheck

Cross domain authentication check

When cross domain authentication check is requested, the system will synchronize user's cookies between current domain and its master domain (e.g. master domain for alapos.hu is alapos.hu.master.thiblo.com; note: master domain may be different because it depends on the installation settings).

After synchronization the system will check if user was authenticated and authenticate it locally, if needed. After this, the next task in the current scope will be launched (currently it is either authentication or comment WCB frame activation).

works as expected / testable

Anton: cross domain auth check works for both authentication and comment actions. We can't write classic automatic tests for it because we don't have an easy access to browser's cookies outside the browser. However, we could write them as a webpage that will set cookie and then check it.


Daniel: Anton, please consider this for learning more about possibilities for automatic testing:

$ man wget

Anton: It seems that  Django testing framework has cookies support too. However, we have javascript that retrieves/sets cookies so I am going to investigate how can we deal with that later.