What does it do and why is it necessary? I am concerned that it implies a requirement to duplicate every CgiScript with a parallel script that first performs authentication.

On an authentication system I once worked for at a past employer we used a single 'auth' script that was called when the system realised that it needed to authenticate. Only this script was marked as needing valid-user. The script was passed a parameter from the calling script that told auth where to go on success and failure.

e.g.

 auth?succeeded=view/%WEB%/%TOPIC%&failed=oops/%WEB%/%TOPIC%&template=oopsauth 

The passed succeed and failed parameters were URL encoded so that they can each carry nested parameter strings.

Would this be useful for TWiki?

-- MartinCleaver - 27 Sep 2004

The single auth script is a nice idea.

-- PeterThoeny - 28 Sep 2004