How to keep backend session information in Polymer SPA -


i'd login restful back-end server written in laravel5, single page front-end application leveraging polymer's custom element.

in system, persistence(crud) layer lives in server. so, authentication should done @ server in responding client's api request. when request valid, server returns user object in json format including user's role access control in client.

here, my questions how can keep session, when user refreshes front-end page? thanks.

this issue beyond polymer, or single page apps. question how keep session information in browser. spas bit easier, since can keep authentication tokens in memory, traditional web apps have had issue since beginning.

you have 2 things need do:

  1. tokens: need user token indicates user authenticated. want cannot guessed, else can spoof it. token better not "jimsmith" more reliable. have 2 choices. either can have randomly generated token server stores, when presented on future requests, can validate token. how session managers work in app servers nodejs sessions or jetty session or etc. alternative cryptographic server needs validate mathematically, not check in store see if token valid. did node in http://github.com/deitch/cansecurity there various options it.
  2. storage: need way store tokens client-side not depend on js memory, since expect reload page.

there several ways client-side storage. common far cookies. since browser stores them without trying hard, , presents them whenever access domain cookie registered for, pretty easy do. many client-side , server-side auth libraries built around them.

an alternative html5 local storage. depending on target browsers , support, can consider using it.

there ways can play url parameters, run risk of losing when switches pages. can work, tend avoid that.

i have not seen components handle cookies directly, shouldn't hard build one.

here gist cookie management code use recent app. feel free wrap build web component cookie management.. long share alike!

https://gist.github.com/deitch/dea1a3a752d54dc0d00a

update:

component.kitchen has storage component here http://component.kitchen/components/tylergarlick/core-resource-storage


Comments

Post a Comment

Popular posts from this blog

Payment information shows nothing in one page checkout page magento -

i using magento ver. 1.9.1.0 want remove shipping information , shipping method step 1 page checkout page. changed code in core file like in app\code\core\mage\checkout\block\onepage.php public function getsteps() { $steps = array(); $stepcodes = $this->_getstepcodes(); /* remove shipping address , shipping method */ $excludestep=array_diff($stepcodes,array('shipping','shipping_method')); //$excludestep=$stepcodes; if ($this->iscustomerloggedin()) { $stepcodes = array_diff($excludestep, array('login')); } foreach ($excludestep $step) { $steps[$step] = $this->getcheckout()->getstepdata($step); } return $steps; } and in app\code\core\mage\checkout\controllers\onepagecontroller.php public function savebillingaction() { if ($this->_expireajax()) { return; } if ($this->getrequest()-...
Read more

tcpdump - How to check if server received packet (acknowledged) -

Image
i running tcpdump on server capture traffic between server (servera) , remote server (serverb). not know how read output tcpdump. point out if serverb acknowledging packets being sent servera being received serverb? here tcpdump log: 2015-03-31 11:32:18.038284 ip (tos 0x0, ttl 64, id 30781, offset 0, flags [df], proto tcp (6), length 60) servera.14033 > serverb.8004: flags [s], cksum 0x02bd (correct), seq 337482636, win 14600, options [mss 1460,nop,nop,ts val 506588081 ecr 0,nop,wscale 7], length 0 0x0000: 4500 003c 783d 4000 4006 bae4 0a04 7a0e e.. servera.14033: flags [s.], cksum 0x3b2a (correct), seq 1742982091, ack 337482637, win 4140, options [mss 1380,nop,wscale 0], length 0 0x0000: 4500 0030 5ff2 0000 f606 5d3b cefd b48a e..0_.....];.... 0x0010: 0a04 7a0e 1f44 36d1 67e3 cbcb 141d 938d ..z..d6.g....... 0x0020: 7012 102c 3b2a 0000 0204 0564 0103 0300 p..,;*.....d.... 2015-03-31 11:32:18.078622 ip (tos 0x0, ttl 64, id 30782, offset 0, flags [...
Read more