Index: openacs-4/www/SYSTEM/security-debug.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/www/SYSTEM/security-debug.tcl,v diff -u -r1.1 -r1.1.2.1 --- openacs-4/www/SYSTEM/security-debug.tcl 7 Oct 2003 09:32:32 -0000 1.1 +++ openacs-4/www/SYSTEM/security-debug.tcl 2 Mar 2004 15:25:23 -0000 1.1.2.1 @@ -1,23 +1,16 @@ - -if { ![string match "your-ip-here" [ns_conn peeraddr]] } { - ns_return 200 text/html "Forbidden" - return -} - - sec_login_handler set session_id {} -catch { set session_id [ad_get_signed_cookie_with_expr "ad_session_id"] } +catch { set session_id [ad_get_signed_cookie_with_expr "ad_session_id"] } session_id set ad_user_login {} -catch { set ad_user_login [ad_get_signed_cookie "ad_user_login"] } +catch { set ad_user_login [ad_get_signed_cookie "ad_user_login"] } ad_user_login set ad_user_login_secure {} -catch { set ad_user_login_secure [ad_get_signed_cookie "ad_user_login_secure"] } +catch { set ad_user_login_secure [ad_get_signed_cookie "ad_user_login_secure"] } ad_user_login_secure set ad_secure_token {} -catch { set ad_secure_token [ad_get_signed_cookie "ad_secure_token"] } +catch { set ad_secure_token [ad_get_signed_cookie "ad_secure_token"] } ad_secure_token set auth_expires_in "N/A" @@ -28,22 +21,27 @@ } -ns_return 200 text/html "
+set page " session_id: $session_id
Cookie name | Value | Explanation |
---|---|---|
session_id | $session_id | session_id, user_id, login_level expiration |
ad_user_login | $ad_user_login | user_id, issue_time, auth_token |
ad_user_login_secure | $ad_user_login_secure | ... |
ad_secure_token | $ad_secure_token | ... |
ad_user_login: $ad_user_login
Cookie HTTP header:
" -ad_user_login_secure:
+foreach elm [split [ns_set iget [ad_conn headers] Cookie] ";"] { + append page [string trim $elm] ";" \n +} -$ad_user_login_secure
ad_secure_token:
- -$ad_secure_token
Cookie HTTP header:
- +append page "[ns_set iget [ad_conn headers] Cookie]
ad_conn
user_id:
@@ -66,3 +64,6 @@ " + + +ns_return 200 text/html $page[ad_conn user_id]