Changes between Version 5 and Version 6 of WikiStart

Timestamp:

01/27/14 11:52:07 (11 years ago)

Author:

smagi

Comment:

--

WikiStart

@@ -110 +110 @@
 }
 }}}
+Lists of non-IConvertible types work the same:
+{{{
+public class SomePage : System.Web.Page, IContinuation<IEnumerable<Project>, Customer>
+{
+  IEnumerable<Project> arg0;
+  Customer arg1;
+
+  override protected void OnInit(EventArgs e)
+  {
+    IEnumerable<Id<int, Project>> id0;
+    if (this.TryParse0(out id0))
+    {
+      var projectIds = id0.Select(x => x.Key).ToList();
+      arg0 = SomeDb.Projects.Where(x => projectIds.Contains(x.Id));
+    }
+
+    Id<int, Customer> id1;
+    if (this.TryParse1(out arg1))
+      arg1 = SomeDb.Customers.Single(x => x.Id == id1.Key);
+  }
+}
+}}}
+
+= Clavis Setup =
+
+== Global.asax.cs ==
+
+Clavis requires a very simple setup. In Global.asax.cs, you simply need to call {{{Continuation.Init}}} to initialize the Clavis library with a private 64-byte key:
+{{{
+protected void Application_Start(object sender, EventArgs e)
+{
+  var key = "ha6dMh+cymHn25ndckkQ9ajtzCu97frmpsmUzTLHEjwMp7nXMX/dqYfATANqNf5jy5Wvi1BFnz1293lc1D3KKw==";
+  Continuation.Init(key);
+}
+}}}
+This makes all URLs delegable, which is to say that no cookies or other type of user-specific context prevents a user from sharing this URL. His private URL carries his full credentials.
+
+If you wish to make URLs non-delegable, then use the other {{{Continuation.Init}}} overload where you can specify a custom context that is hashed with the default HMAC:
+{{{
+protected void Application_Start(object sender, EventArgs e)
+{
+  var key = "ha6dMh+cymHn25ndckkQ9ajtzCu97frmpsmUzTLHEjwMp7nXMX/dqYfATANqNf5jy5Wvi1BFnz1293lc1D3KKw==";
+  Continuation.Init(key, () =>
+  {
+    var x = HttpContext.Current.Session;
+    return x == null ? "" : x.SessionID;
+  });
+}
+}}}
+Here we use the default ASP.NET session id which is stored in cookies to ensure that users can't inadvertently leak their private URL.
+
+== Page.OnPreInit ==
+
+The last step is to add continuation validation at some point in the page lifecycle. Clavis checks that all the protected parameters hash to the same HMAC value as specified in the URL. If they don't, an exception was thrown indicating that a protected parameter was incorrectly changed. I typically do this in Page.OnPreInit:
+{{{
+protected override void OnPreInit(EventArgs e)
+{
+  var k = this as IContinuationBase;
+  if (k != null) k.Validate();
+}
+}}}