This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author keakon
Recipients georg.brandl, keakon, spookylukey, terry.reedy
Date 2013-03-09.04:16:10
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1362802570.65.0.801611723288.issue17340@psf.upfronthosting.co.za>
In-reply-to
Content
Terry, I think that's the standard process of web applications.

1. The user agent send cookie via HTTP headers to the web server.
2. The web server parse its cookie. If the server fails to find something proves the user has logged in from his cookie, redirect him to the login page.
3. The user agent post login information to the web server.
4. The web server verify the post data. If it's correct, the server send Set-Cookie headers which can be used as a proof in the step 2 to the user agent.

After the 4 steps, the user agent should be considered as a logged-in user.
However, in the step 2, the server cannot parse his cookie duo to CookieError. It has to redirect the user to the login page and continue the next steps.

I don't think there is anything wrong with the process except the strange behavior of Cookie.SimpleCookie.load().
History
Date User Action Args
2013-03-09 04:16:10keakonsetrecipients: + keakon, georg.brandl, terry.reedy, spookylukey
2013-03-09 04:16:10keakonsetmessageid: <1362802570.65.0.801611723288.issue17340@psf.upfronthosting.co.za>
2013-03-09 04:16:10keakonlinkissue17340 messages
2013-03-09 04:16:10keakoncreate