[cgiapp] Single sign on examples?

[Jaclyn Whitehorn <suppressed>]

I'm about to have to re-do some applications, so I was hoping to get a 
jump on it by seeing if anyone has some advice.

Current situation:
  - Multiple applications that use same (LDAP) login info to accomplish 
basic tasks.  (Our "tools")
  - My "SuperApp" module is a subclass of CGI::Application.  It handles 
authentication and sessions, overrides the load template method (so 
that I can use separate headers and footers), and makes some basic 
assumption about file locations.
  - Other applications are subclasses of the SuperApp.  Some are more 
complicated (with helper modules managing DB connections or .procmailrc 
files, for example) than others.
  - Each application has its own .pl file that instantiates and runs 
the particular application object.

What I have to do:
  - Recreate each one to work in a single sign on (portal) environment.

We've added a portal (commercial product based on uPortal) and want 
these tools to be available from within there.  The portal tech team is 
going to work with me so that they can send a trusted key that will 
tell me that the person is authenticated and their user name (which is 
all I need).  So anyone got some examples on how I should proceed?  
After a certain point, almost all of the applications will be only 
available via the portal, so I'm OK with re-doing a "PortalSuperApp".   
(Or more likely, take the authentication out of the SuperApp, then have 
a WebSuperApp and a PortalSuperApp both subclassed from there.  No 
wonder I'm procrastinating!)

I've also considered integrating them a bit more while I'm at it, but I 
do still want each one in its own module.  I'm pretty comfortable with 
my "helper" modules, but I've never had a setup where runmodes were in 
different modules.  So if anyone has experience there either, I'd love 
to have some more code to look at.

TIA,
Jaclyn


---------------------------------------------------------------------
Web Archive:  http://www.mail-archive.com/suppressed/
             http://marc.theaimsgroup.com/?l=cgiapp&r=1&w=2
To unsubscribe, e-mail: suppressed
For additional commands, e-mail: suppressed