Hi Massimo, Thanks for your reply.
if the user is logged-in you do not have to pass an hmac_key. It is > automatically generated per-session. > The user is not logged in, the router function is part of the public functions of my application. The URL contains three arguments that determine which function is being executed for a particular node. In the workgroup I read this reply, posted by Anthony: Well, maybe we should reserve user_signature for logged in users only (otherwise would be a backward compatibility issue), but a separate session_signature argument might be an option. Yes, the idea is for it to generate a session.hmac_key if it doesn't exist. Not sure how useful this would be. That's what I am looking for. Kind regards, Annet -- Resources: - http://web2py.com - http://web2py.com/book (Documentation) - http://github.com/web2py/web2py (Source code) - https://code.google.com/p/web2py/issues/list (Report Issues) --- You received this message because you are subscribed to the Google Groups "web2py-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to web2py+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
