auto signin

[hailiang-wang]

Questions

http://stackoverflow.com/questions/15026016/set-cookie-in-http-header-is-ignored-with-angularjs
angular/angular.js#1209

http://stackoverflow.com/questions/19383311/angularjs-http-does-not-seem-to-understand-set-cookie-in-the-response

Blogs

http://ionicframework.com/blog/angularjs-authentication/

Use

Authentication with Ionic and Angular.js in a Cordova/Phonegap mobile web application

[hailiang-wang]

services.js:188
2XMLHttpRequest cannot load http://mobay.mybluemix.net/auth/local. 
A wildcard '*' cannot be used in the 'Access-Control-Allow-Origin' header when 
the credentials flag is true. Origin 'http://192.168.1.103:8100' is therefore not allowed access. 

[hailiang-wang]

XMLHttpRequest cannot load http://mobay.mybluemix.net/auth/local. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://192.168.1.103:8100' is therefore not allowed access. The response had HTTP status code 404. 

[hailiang-wang]

Token v.s. Cookie AUTH -
https://auth0.com/blog/2014/01/07/angularjs-authentication-with-cookies-vs-token/

[hailiang-wang]

Tips:

Support CORS in Server side

add header : Access-Control-Allow-Credentials: true

        # Access-Control-Allow-Origin must not be '*', it does not work along with withCredentials tag in mobile client
    res.setHeader('Access-Control-Allow-Origin', '*.mybluemix.net');
    res.setHeader('Access-Control-Allow-Credentials', 'true');

Set withCredentials

.config(function($stateProvider, $urlRouterProvider, $httpProvider, $sceDelegateProvider) {

  $httpProvider.defaults.withCredentials = true;
...

Start your chrome with such command for development

/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --disable-web-security

Unfortunately, Safari and firefox do not support this usage. So, when development with grunt serve, only use chrome to open the web page.