Login with cookie

[robotnic]

My client uses xmpp and maybe will also use rest.

How to login?

For xmpp at the moment I need username and password.
To have passwords in cookies is not really state of the art.

After rest login I have a "credentials" cookie and I would like to use this cookie for xmpp login.
Does that kind of auth already exist?

It would be easy to send the sessionid as password.

The implementation should be easy using json_http
https://github.com/scastillo/prosody-mod_auth_json_http

socket.send(
'xmpp.login',
{
"jid": "test@evilprofessor.co.uk",
"password": "sessionid"
}
)

Any suggestions on that?

[imaginator]

This is an interesting suggestion and something that I've been worried about for a while.

Would you see it as:

• login with username password
• get back string
• write string to cookie
• use string to reauthenticate

Would any of the oauth2 bits (https://developers.google.com/talk/jep_extensions/oauth) help us here?

[robotnic]

That looks good.