Re: [hackers] [quark] Thoughts on CGI and authentication?

From: Laslo Hunhold <dev_AT_frign.de>
Date: Fri, 23 Oct 2020 13:51:12 +0200

On Thu, 22 Oct 2020 20:52:27 +0200
José Miguel Sánchez García <soy.jmi2k_AT_gmail.com> wrote:

Dear José,

> I'm currently serving my static webpage with quark. I want to add some
> CGI, but the opinion here about CGI support in the server is pretty
> low. I'm trying to update the basecgi patch, but the latest changes
> adding interruptibility seem to complicate the design (the goals of
> these two are kinda opposite to what CGI does right? I mean, these are
> about memory-bounded operation and CGI scripts can generate
> arbitrarily long data, which must be known before even generating the
> response header). I have no experience with HTTP whatsoever, so I want
> to hear better-informed opinions ;)

to be honest, I don't see any way CGI would work with the latest
architectural change. Quark's scope is static serving.

> About authentication, I think it is a pretty useful feature. I'll
> investigate how to implement it properly (abusing file system
> ownership/permissions, through a table of auth realms in config.h,
> command line parameters... Again, I'd like to hear more opinions) and
> upload it as a patch. Is it interesting enough to include it upstream?

Definitely! I think that using the file system is an excellent idea.

With best regards

Laslo
Received on Fri Oct 23 2020 - 13:51:12 CEST