See http://issues.cocoondev.org/browse/DSY-148

Being able to "save" your login on a computer. Think GMail, Flickr, Wordpress, etc. Introduces obvious security challenges, however all the cool kids are doing it anyway.

Priority: medium. Feasibility: OK, with some caveats.

Work involved:

  • UI work:
    • checkbox on login screen
    • admin UI for enabling the feature? (file-based configuration may be sufficient)
  • add auto-login action to daisy sitemap.xmap
  • implement auto-login action:
    • get system/internal repository
  • DaisyHttpClient and RemoteRepository changes
  • Authentication Scheme configuration

Marc suggests investigations towards openId (recipe) and OAuth. Using openId would be a good idea to avoid reinventing the wheel and allowing us to use existing infrastructure and libraries.

Fields

NameValue
CategoryDesign documents & proposals