I'm currently building a web app using HTTP server application project + fpweb + tiopf (with sqlite backend). However, I'm stuck in this scenario:

Imagine a user log's in to my web app, which could be done from any page (it's part of the layout), how can I:
Save login data in session, in case the login is successful, and reuse it in certain pages requiring login
Redirect the request back to its referer (I could get the referer from ARequest.Referer)

FYI, I've been able to login simply by using TtiObjectList.FindByProps.

If you need to see current code, it's attached.

http://free-pascal-general.1045716.n5.nabble.com/file/n5602126/tkd1depok.zip tkd1depok.zip

Save Session data in login request handler:

Session.Variables['UserID']:='XYZ';

In every request that needs a login, do a

if (Session.Variables['UserID']='') then
    Response.SendRedirect('Yourloginurl');

Redirect the request back to its referer (I could get the referer from ARequest.Referer)

Do something like this:

if LoginSuccesfull then
   begin
   Session.Variables['UserID']:='XYZ';
   Response.SendRedirect(ARequest.Referer);
   Exit;
   end;

Michael.

Thanks, Michael. This framework is great, it just needs proper documentation...

I've tried it out, but the session doesn't seem to be shared among modules, is it correct that I set CreateSession to true for all modules?

Please try the updated project (attached). The authentication is handled by ModAuth, but the login form (or welcome message + logout link) is handled by ModLayout. The login form would change to welcome message + logout link only if module in the uri stays in 'auth', where it's supposed to change as long as the session hasn't expired.

http://free-pascal-general.1045716.n5.nabble.com/file/n5604218/tkd1depok.zip tkd1depok.zip

Found it in the combined example project, set Session.SessionCookiePath to the same string, whatever it is.