wardencommunity/warden

Wiki page blank for "authenticated session data"

fj opened this issue · 8 comments

fj commented

At the bottom of the Scopes page is a link to authenticated session data, but this page is blank.

I couldn't find any reference to "authenticated session data" or something similar in the Warden code. Is this page valid?

I can't see anything from the source that indicates how this works either, session data does appear to be segmented by scope, but that's about it. How the session data is secured or persisted however appears to be handled upstream.

would love an expansion on this topic as well

The warden proxy includes a managed session on it once you're logged in.

 env['warden'].session[:foo] = "bar" # the session for the default scope

If you're using scopes to login (lets say an :admin) scope.

 env['warden'].session(:admin)[:admin_data] = "bar" # session data scoped to admin

When you logout by default all session data is cleared (and everyone is logged out). If you logout a particular scope (:admin)

 env['warden'].logout(:admin)

The session information that was attached for :admin (i.e. :admin_data => "bar") is cleared, but the remainder of warden managed session data remains intact

+1

fj commented

@hassox: Awesome, this looks great! Thanks for expanding.

Thank you!

Useful! :)