LiveDocs Comments - coldfusion - 6.1 - htmldocs - tags-p73.htm

coldfusion/6.1/htmldocs/tags-p73.htm

Rob 98765 — 2005-11-13T12:13:32

Regarding what CFspider said on Nov 17, 2004 at 3:31 PM: Thanks for your insight and solution. This only seems to happen when you use session variables for the login, my application worked fine until I added loginstorage="session" at which point only your trick got it working again.

coldfusion/6.1/htmldocs/tags-p73.htm

2005-09-22T03:29:45

thanks

coldfusion/6.1/htmldocs/tags-p73.htm

mikesnp — 2005-05-02T13:57:17

I encountering a problem with authentication in some cases. After login when the users accesses any page the following error occurs:

Can not decode string "ODA2Oic MEI1QllXLVYgICAKOkdFU0FVQ1RJT05T". The input string is not base64-encoded.

The string is variable.

I found the solution is to specify a "loginStorage" attribute in the CFAPPLICATION tag. In our case I set this to loginStorage="session".

Without the attribute, cfauthorization="ODA2Oic MEI1QllXLVYgICAKOkdFU0FVQ1RJT05T"
NOTICE THE WHITESPACE.

With the attribute, cfauthorization="ODA2Oic+MEI1QllXLVYgICAKOkdFU0FVQ1RJT05T" . Notice the + sign where the whitespace had been.

coldfusion/6.1/htmldocs/tags-p73.htm

MikerRoo — 2004-12-19T00:18:30

idletimeout is misspelled in the legend.

coldfusion/6.1/htmldocs/tags-p73.htm

-r- — 2004-12-10T18:52:49

IdleTimeout description: "Time interval with no keyboard activity after which ColdFusion logs the user off."

How can this be? You can have TONs of keyboard activity without causing a round trip to the server. How does the ColdFusion server know I am typing, say, an email message to someone? Is there a Psychic ColdFusion server out there somewhere?

coldfusion/6.1/htmldocs/tags-p73.htm

GreyLurk — 2004-11-25T01:06:09

How does the information from HTTP basic and/or digest come in? Is cflogin always defined if the web server requires HTTP basic and/or digest?

coldfusion/6.1/htmldocs/tags-p73.htm

CFspider — 2004-11-17T15:31:29

getAuthUser needs CFLOGIN

The getAuthUser and isUserInRole functions will only work if the CFLOGIN tag was encountered previously within the scope of the same request. In other words, if your CFLOGIN tag is not in your Application.cfm file, and you try to call getAuthUser or isUserInRole during the scope of a request where no CFLOGIN tag was encountered, you get an empty string and false respectively. This is not usually noticed because the CFLOGIN tag is in my Application.cfm file where it was clearly intended to go. Fortunately, a quick tag before you call getAuthUser or isUserInRole fixes the issue by making the necessary variable scope available.

Is there anyway you see this workaround causing a problem?

Thanks

coldfusion/6.1/htmldocs/tags-p73.htm

2004-10-29T09:47:42

It is worth noting here that if you out of the block, even after the call, the user will not be logged in.

coldfusion/6.1/htmldocs/tags-p73.htm

Mike Rolfes — 2004-10-16T16:33:13

I seem to have found a quirk with the CFLOGOUT tag and the GetAuthUser function. When I used it from a customized CFC, the logout deleted the session.cfauthorization variable which seems to be the variable responsible for keeping track of logins, but the GetAuthUser function after logging out returns my Windows OS login ID instead of a blank string. Am I reading missing something?

coldfusion/6.1/htmldocs/tags-p73.htm

snow811 — 2004-08-16T11:24:15

after one uses cfloginuser, and then logsout using cflogout, when click the back button and refreshing the page, the user is still logged in. Then the user may navigate to pages within the application.

coldfusion/6.1/htmldocs/tags-p73.htm

jrunrandy — 2004-07-27T05:34:09

I believe that the page explains that the cflogin tag has a built-in cflogin structure.

If your application continues to have problems, I suggest posting your code to the online forums: http://webforums.macromedia.com/coldfusion/

coldfusion/6.1/htmldocs/tags-p73.htm

cfoli — 2004-07-26T02:13:02

What is exactly cflogin in >> IsDefined("cflogin") << ?
Is CFLOGINUSER supposed to create some kind of struct ?

I have implemented a quick application using CFLOGIN & CFLOGINUSER , and tested that it is working fine with GetAuthUser() and IsUserInRole(), and it works fine.

However, when I try to CDFUMP #cflogin#, the variable doesn't exist... Also when trying to IsDefined("cflogin") after successfully authenticating, the IsDefined is FALSE...

So back to the very first line of this message... What is exactly cflogin in >> IsDefined("cflogin") << ?

Thanks!! :)

coldfusion/6.1/htmldocs/tags-p73.htm

fribble — 2004-05-17T06:33:02

Have there been compatability issues with Mac Netscape? My implementation works on Mac IE, PC IE, PC Netscape but wont allow login on Mac Netscpe.

coldfusion/6.1/htmldocs/tags-p73.htm

jrunrandy — 2004-03-05T05:43:25

You are responsible for coding the SQL within the CFLOGIN. So the data source is something you control,
and you need to make sure that the associated database has user, password, and role information.

Something like:

DATASOURCE="UserRolesDb">
SELECT Roles FROM SecurityRoles
WHERE username='#cflogin.name#'
and password='#cflogin.password#'

PASSWORD = "#cflogin.password#"
ROLES = "#trim(qSecurity.Roles)#" >

coldfusion/6.1/htmldocs/tags-p73.htm

2004-03-04T19:19:41

Yea, I have been looking all around for how the data source is accessed and cannot find it. Hopefully the roles will be located in the same datasource, and the logged in user's role can be accessed anywhere in the session.. Can someone tell us how to use the data source??

coldfusion/6.1/htmldocs/tags-p73.htm

areeves — 2004-03-03T08:01:08

How does it use a data source? I don't see any documentation on how to use cfloinuser to a data souce?