Are you building a single page app or a multi-page? Off topic but related: How you are sending your username/password?
Are you relying solely on TLS, or do you also encrypt or hash your passwords on the client before sending them to your server code? Sorry to hijack your thread, but I'm sure you already figured out what I'm trying to do. - edward On Monday, January 2, 2017 at 7:12:44 PM UTC-8, Henry wrote: > > Hi, > > I have a question regarding a form-based authentication mechanism. Given > the following situation: > > 1. User lands on the login page and attempts to sign in. > 2. The server authenticates user and sets session cookie on the http > response upon successful authentication. > > Then, how do I get the user to the resource page after successful > authentication? Redirection seems to just forward the existing http request > (the http request when user first lands on the login page) and hence there > is no session cookie detected. > > Thanks > > Henry > -- You received this message because you are subscribed to the Google Groups "golang-nuts" group. To unsubscribe from this group and stop receiving emails from it, send an email to golang-nuts+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.