Soma at 04:58, 4 October 2013

2013-10-04T04:58:29Z

← Older revision		Revision as of 04:58, 4 October 2013
Line 7:		Line 7:
	* What does the req.body and req.session look like just before a page gets rendered?		* What does the req.body and req.session look like just before a page gets rendered?

	To get checked off, show a TA the following:		To get checked off, show a TA the following using the browser and server debugging tools covered in the last tutorial (or similar tools):
	* A session cookie sent by the browser		* A session cookie sent by the browser
	* A session cookie stored on the server (persistently)		* A session cookie stored on the server (persistently)

			Questions to ponder:
			* Who can observe the cookie? Modify it?
			* How "persistent" are sessions on the server? The client?
			* How could you "hijack" a session? Does the difficulty of session hijacking relate to whether a login is password protected or not?

Soma: Created page with "In this tutorial you will examine [http://homeostasis.scs.carleton.ca/~soma/webfund-2013f/session-demo.zip session-demo], a simple node express application that demonstrates s..."

2013-10-04T04:50:30Z

Created page with "In this tutorial you will examine [http://homeostasis.scs.carleton.ca/~soma/webfund-2013f/session-demo.zip session-demo], a simple node express application that demonstrates s..."

New page

In this tutorial you will examine [http://homeostasis.scs.carleton.ca/~soma/webfund-2013f/session-demo.zip session-demo], a simple node express application that demonstrates session support.

In this tutorial you should do the following:
* Get [http://homeostasis.scs.carleton.ca/~soma/webfund-2013f/session-demo.zip session-demo] in the same manner you got <tt>form-demo</tt> running.
* Try logging in to the app using two different browsers (e.g., Firefox and Chrome). What happens when you logout from one browser - how does it affect the other?
* The session state is stored in the browser. Can you figure out the user's username from this information?
* What does the req.body and req.session look like just before a page gets rendered?

To get checked off, show a TA the following:
* A session cookie sent by the browser
* A session cookie stored on the server (persistently)

WebFund 2013F: Tutorial 5 - Revision history

Soma at 04:58, 4 October 2013

Soma: Created page with "In this tutorial you will examine [http://homeostasis.scs.carleton.ca/~soma/webfund-2013f/session-demo.zip session-demo], a simple node express application that demonstrates s..."