WebFund 2014W: Tutorial 3 - Revision history

Soma: Undo revision 19747 by Soma (talk)

2015-01-31T16:54:29Z

Undo revision 19747 by Soma (talk)

← Older revision		Revision as of 16:54, 31 January 2015
Line 13:		Line 13:
	* A session cookie sent by the browser		* A session cookie sent by the browser
	* A session cookie stored on the server		* A session cookie stored on the server


	Questions to ponder:		Questions to ponder:

Soma: Undo revision 19746 by Soma (talk)

2015-01-31T16:54:08Z

Undo revision 19746 by Soma (talk)

← Older revision		Revision as of 16:54, 31 January 2015
Line 1:		Line 1:
	In this tutorial you will examine [http://homeostasis.scs.carleton.ca/~soma/webfund-2014w/T3/session-demo.zip session-demo], a simple node express application that demonstrates session support. You will need to use the browser and node debugging tools described in the [[WebFund ~~2015W~~: Tutorial 2\|~~Tutorial 2~~]].		In this tutorial you will examine [http://homeostasis.scs.carleton.ca/~soma/webfund-2014w/T3/session-demo.zip session-demo], a simple node express application that demonstrates session support. You will need to use the browser and node debugging tools described in the [[WebFund 2014W: Tutorial 2\|last tutorial]].

	In this tutorial you should do the following:		In this tutorial you should do the following:
	* Get [http://homeostasis.scs.carleton.ca/~soma/webfund-~~2015w~~/~~code~~/session-demo.zip session-demo] running.		* Get [http://homeostasis.scs.carleton.ca/~soma/webfund-2014w/T3/session-demo.zip session-demo] running.
	* Try logging in to the app using two different browsers (e.g., Firefox and Chrome). What happens when you logout from one browser - how does it affect the other?		* Try logging in to the app using two different browsers (e.g., Firefox and Chrome). What happens when you logout from one browser - how does it affect the other?
	* Observe the request and response for the app's home page (http://localhost:3000). Look at both the network panel (load the page ''after'' selecting the network panel) and the HTML DOM view (Inspector/Elements)		* Observe the request and response for the app's home page (http://localhost:3000). Look at both the network panel (load the page ''after'' selecting the network panel) and the HTML DOM view (Inspector/Elements)
Line 19:		Line 19:
	* How "persistent" are sessions on the server? The client?		* How "persistent" are sessions on the server? The client?
	* How could you "hijack" a session? Does the difficulty of session hijacking relate to whether a login is password protected or not?		* How could you "hijack" a session? Does the difficulty of session hijacking relate to whether a login is password protected or not?
	* How much code would you have to add to [[WebFund 2015W: Tutorial 3\|tinywebserver]] in order to get it to duplicate the functionality of session-demo?

Soma at 16:49, 31 January 2015

2015-01-31T16:49:19Z

← Older revision		Revision as of 16:49, 31 January 2015
Line 13:		Line 13:
	* A session cookie sent by the browser		* A session cookie sent by the browser
	* A session cookie stored on the server		* A session cookie stored on the server


	Questions to ponder:		Questions to ponder:

Soma at 16:48, 31 January 2015

2015-01-31T16:48:57Z

← Older revision		Revision as of 16:48, 31 January 2015
Line 1:		Line 1:
	In this tutorial you will examine [http://homeostasis.scs.carleton.ca/~soma/webfund-2014w/T3/session-demo.zip session-demo], a simple node express application that demonstrates session support. You will need to use the browser and node debugging tools described in the [[WebFund ~~2014W~~: Tutorial 2\|~~last tutorial~~]].		In this tutorial you will examine [http://homeostasis.scs.carleton.ca/~soma/webfund-2014w/T3/session-demo.zip session-demo], a simple node express application that demonstrates session support. You will need to use the browser and node debugging tools described in the [[WebFund 2015W: Tutorial 2\|Tutorial 2]].

	In this tutorial you should do the following:		In this tutorial you should do the following:
	* Get [http://homeostasis.scs.carleton.ca/~soma/webfund-~~2014w~~/T3/session-demo.zip session-demo] running.		* Get [http://homeostasis.scs.carleton.ca/~soma/webfund-2015w/code/session-demo.zip session-demo] running.
	* Try logging in to the app using two different browsers (e.g., Firefox and Chrome). What happens when you logout from one browser - how does it affect the other?		* Try logging in to the app using two different browsers (e.g., Firefox and Chrome). What happens when you logout from one browser - how does it affect the other?
	* Observe the request and response for the app's home page (http://localhost:3000). Look at both the network panel (load the page ''after'' selecting the network panel) and the HTML DOM view (Inspector/Elements)		* Observe the request and response for the app's home page (http://localhost:3000). Look at both the network panel (load the page ''after'' selecting the network panel) and the HTML DOM view (Inspector/Elements)
Line 18:		Line 18:
	* How "persistent" are sessions on the server? The client?		* How "persistent" are sessions on the server? The client?
	* How could you "hijack" a session? Does the difficulty of session hijacking relate to whether a login is password protected or not?		* How could you "hijack" a session? Does the difficulty of session hijacking relate to whether a login is password protected or not?
			* How much code would you have to add to [[WebFund 2015W: Tutorial 3\|tinywebserver]] in order to get it to duplicate the functionality of session-demo?

Soma at 21:28, 23 January 2014

2014-01-23T21:28:36Z

← Older revision		Revision as of 21:28, 23 January 2014
Line 12:		Line 12:
	To get checked off, show a TA the following:		To get checked off, show a TA the following:
	* A session cookie sent by the browser		* A session cookie sent by the browser
	* A session cookie stored on the server ~~(persistently)~~		* A session cookie stored on the server

	Questions to ponder:		Questions to ponder:

Soma at 20:47, 23 January 2014

2014-01-23T20:47:22Z

← Older revision		Revision as of 20:47, 23 January 2014
Line 2:		Line 2:

	In this tutorial you should do the following:		In this tutorial you should do the following:
	* Get [http://homeostasis.scs.carleton.ca/~soma/webfund-~~2013f~~/session-demo.zip session-demo] running.		* Get [http://homeostasis.scs.carleton.ca/~soma/webfund-2014w/T3/session-demo.zip session-demo] running.
	* Try logging in to the app using two different browsers (e.g., Firefox and Chrome). What happens when you logout from one browser - how does it affect the other?		* Try logging in to the app using two different browsers (e.g., Firefox and Chrome). What happens when you logout from one browser - how does it affect the other?
	* Observe the request and response for the app's home page (http://localhost:~~3010~~). Look at both the network panel (load the page ''after'' selecting the network panel) and the HTML DOM view (Inspector/Elements)		* Observe the request and response for the app's home page (http://localhost:3000). Look at both the network panel (load the page ''after'' selecting the network panel) and the HTML DOM view (Inspector/Elements)
	* Observe the contents of the form submit POST request: how much data is sent to the server? Observe it both from the browser side (to see what is sent) and inside of node, particularly where the POST results are returned.		* Observe the contents of the form submit POST request: how much data is sent to the server? Observe it both from the browser side (to see what is sent) and inside of node, particularly where the POST results are returned.
	* The session state is stored in the browser. Can you figure out the user's username from this information?		* The session state is stored in the browser. Can you figure out the user's username from this information?

Soma at 15:13, 22 January 2014

2014-01-22T15:13:43Z

← Older revision		Revision as of 15:13, 22 January 2014
Line 1:		Line 1:
	In this tutorial you will examine [http://homeostasis.scs.carleton.ca/~soma/webfund-2014w/session-demo.zip session-demo], a simple node express application that demonstrates session support. You will need to use the browser and node debugging tools described in the [[WebFund 2014W: Tutorial 2\|last tutorial]].		In this tutorial you will examine [http://homeostasis.scs.carleton.ca/~soma/webfund-2014w/T3/session-demo.zip session-demo], a simple node express application that demonstrates session support. You will need to use the browser and node debugging tools described in the [[WebFund 2014W: Tutorial 2\|last tutorial]].

	In this tutorial you should do the following:		In this tutorial you should do the following:

Soma at 15:11, 22 January 2014

2014-01-22T15:11:35Z

← Older revision		Revision as of 15:11, 22 January 2014
Line 10:		Line 10:


	To get checked off, show a TA the following ~~using the browser and server debugging tools covered in the last tutorial (or similar tools)~~:		To get checked off, show a TA the following:
	* A session cookie sent by the browser		* A session cookie sent by the browser
	* A session cookie stored on the server (persistently)		* A session cookie stored on the server (persistently)

Soma at 15:10, 22 January 2014

2014-01-22T15:10:45Z

← Older revision		Revision as of 15:10, 22 January 2014
Line 1:		Line 1:
	In this tutorial you will examine [http://homeostasis.scs.carleton.ca/~soma/webfund-2014w/session-demo.zip session-demo], a simple node express application that demonstrates session support. You will need to use the debugging tools ~~referenced~~ in the [[WebFund 2014W: Tutorial 2\|last tutorial]].		In this tutorial you will examine [http://homeostasis.scs.carleton.ca/~soma/webfund-2014w/session-demo.zip session-demo], a simple node express application that demonstrates session support. You will need to use the browser and node debugging tools described in the [[WebFund 2014W: Tutorial 2\|last tutorial]].

	In this tutorial you should do the following:		In this tutorial you should do the following:

Soma at 15:10, 22 January 2014

2014-01-22T15:10:10Z

← Older revision		Revision as of 15:10, 22 January 2014
Line 1:		Line 1:
	In this tutorial you will examine [http://homeostasis.scs.carleton.ca/~soma/webfund-~~2013f~~/session-demo.zip session-demo], a simple node express application that demonstrates session support. You will need to use the debugging tools referenced in the [[WebFund 2014W: Tutorial 2\|last tutorial]].		In this tutorial you will examine [http://homeostasis.scs.carleton.ca/~soma/webfund-2014w/session-demo.zip session-demo], a simple node express application that demonstrates session support. You will need to use the debugging tools referenced in the [[WebFund 2014W: Tutorial 2\|last tutorial]].

	In this tutorial you should do the following:		In this tutorial you should do the following:
	* Get [http://homeostasis.scs.carleton.ca/~soma/webfund-2013f/session-demo.zip session-demo] ~~in the same manner you got <tt>form-demo</tt>~~ running.		* Get [http://homeostasis.scs.carleton.ca/~soma/webfund-2013f/session-demo.zip session-demo] running.
	* Try logging in to the app using two different browsers (e.g., Firefox and Chrome). What happens when you logout from one browser - how does it affect the other?		* Try logging in to the app using two different browsers (e.g., Firefox and Chrome). What happens when you logout from one browser - how does it affect the other?
	* Observe the request and response for the app's home page (http://localhost:3010). Look at both the network panel (load the page ''after'' selecting the network panel) and the HTML DOM view (Inspector/Elements)		* Observe the request and response for the app's home page (http://localhost:3010). Look at both the network panel (load the page ''after'' selecting the network panel) and the HTML DOM view (Inspector/Elements)