Use session cookie instead of basic auth on Android

[snej]

We can fix all the problems and inconveniences of authentication on Android, if we use a session cookie instead of basic auth:

• [ ] Implement POST /_session in the Router — this is standard API from CouchDB that takes the username/password from the request, authenticates, generates a session cookie and returns it in a Set-Cookie header.
• [ ] Add session cookie detection in the Router as an alternative to HTTP auth
• [ ] When the plugin starts up, POST to /_session to set up the session cookie.
• [ ] Just give the app the regular db URL without the username/password in it.

[NitzDKoder]

@hideki is this coming to android any soon?

[hideki]

@NitzDKoder

is this coming to android any soon?

We don't have a schedule for this enhancement.

Sorry, I did not make enough attention to Couchbase-Lite-PhoneGap-Plugin repo. I filed this ticket to https://github.com/couchbase/couchbase-lite-android/issues/1244.

Thanks, Hideki