Re: [tryton-dev] XML-RPC authentication

2010-03-18 Thread Hartmut Goebel
Am 17.03.2010 17:19, schrieb Cédric Krier: > On 17/03/10 09:15 -0700, Ian Wilson wrote: >> I don't know much about this, but I thought repeating sending the >> username and password was frowned upon. Why is this a better approach >> than the session/login approach? > > It is a standard method and

Re: [tryton-dev] XML-RPC authentication

2010-03-17 Thread Cédric Krier
On 17/03/10 11:33 -0500, Gustavo Andrés Angulo wrote: > Hi, when using HTTP authentication on every request the user and password > are sent in the HTTP protocol in the section "credentials", I think this > is wrong way, for to use HTTP authentication protocol I use HTTP + SSL (HTTPS) > and if I

Re: [tryton-dev] XML-RPC authentication

2010-03-17 Thread Gustavo Andrés Angulo
Hi, when using HTTP authentication on every request the user and password are sent in the HTTP protocol in the section "credentials", I think this is wrong way, for to use HTTP authentication protocol I use HTTP + SSL (HTTPS) and if I want use HTTP the best way is to use a token something like h

Re: [tryton-dev] XML-RPC authentication

2010-03-17 Thread Cédric Krier
On 17/03/10 09:15 -0700, Ian Wilson wrote: > I don't know much about this, but I thought repeating sending the > username and password was frowned upon. Why is this a better approach > than the session/login approach? It is a standard method and later we could implement authentication for HTTP 1.

Re: [tryton-dev] XML-RPC authentication

2010-03-17 Thread Ian Wilson
I don't know much about this, but I thought repeating sending the username and password was frowned upon. Why is this a better approach than the session/login approach? On Wed, Mar 17, 2010 at 8:17 AM, Cédric Krier wrote: > Hi, > > I propose to change the authentication mechanism used in XML-RPC