Closed lexoyo closed 7 years ago
Do you think we should display an error page, or is the JSON on purpose?
I think the app should display an "Invalid user/password" type error
There is the login and password in the URL of the callback in GET, do you think we could make it more secure? (POST at least or in the session)
That's bad... It sure would be better to not have this plain in the open. I'll try to figure something out
I think the app should display an "Invalid user/password" type error
oh you mean the app calling unifile yes of course, that's good so you think of a mechanism to retrieve the error in the callback?
When there is an authentication error, the FTP service logs something like this in the console
ERROR { Error: Login authentication failed
and returns this in the response:1- Do you think we should display an error page, or is the JSON on purpose? 2- Maybe also more data about why it failed? 3- There is the login and password in the URL of the callback in GET, do you think we could make it more secure? (POST at least or in the session)