Closed auniverseaway closed 7 years ago
I think the plan is to build a servlet that can adapt the current session against a resource resolver and check for the values we need. We won't call the servlet unless we detect a login-token cookie client-side (JS).
The formauth cookie is http only, so we cannot get it client-side.
If an author (or anyone) is logged in, we should auto-fill their name.
Additionally, we should somehow signify that the author commenting is part of the site and not just a random person commenting.